Launchpad.net

CVE 2019-18648

When logged in as an admin user, the Untangle NG firewall 14.2.0 is vulnerable to reflected XSS at multiple places and specific user input fields.

See the CVE page on Mitre.org for more details.

References