Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WatchGuard Firebox Authentication Portal Request Smuggling Vulnerability
Vulnerability Description
An HTTP Request Smuggling [CWE-444] vulnerability in the Authentication portal of WatchGuard Fireware OS allows a remote attacker to evade request parameter sanitation and perform a reflected self-Cross-Site Scripting (XSS) attack.This issue affects Fireware OS: from 12.0 through 12.11.2.
CVSS Information
N/A
Vulnerability Type
HTTP请求的解释不一致性(HTTP请求私运)
Vulnerability Title
WatchGuard Fireware OS 安全漏洞
Vulnerability Description
WatchGuard Fireware OS是美国WatchGuard公司的一个在 Firebox 上运行的软件。 WatchGuard Fireware OS 12.0版本至12.11.2版本存在安全漏洞，该漏洞源于身份验证门户存在HTTP请求夹带技术，可能导致反射型跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A