PT-2025-30985 · Comodo · Comodo Dragon

Phongxuan-Fpt-Metrodata-Indonesia · Published 2025-07-26 · Updated 2025-07-26 · CVE-2025-8206

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Comodo Dragon versions up to 134.0.6998.179

Description A cross-site scripting issue exists in Comodo Dragon’s IP DNS Leakage Detector component. The issue is remotely exploitable, but requires a high level of complexity and is considered difficult to exploit. The exploit has been publicly disclosed, and the vendor was notified but did not respond.

Recommendations Versions prior to 134.0.6998.179 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2025-8206

Affected Products

Comodo Dragon

References · 7

• 🔥 https://news.fmisec.com/comodo-dragon-vulnerability · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-8206 · Security Note
• https://osv.dev/vulnerability/CVE-2025-8206 · Vendor Advisory
• https://vuldb.com/?ctiid.317775 · Note
• https://vuldb.com/?id.317775 · Note
• https://twitter.com/CVEnew/status/1949186173907185763 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1949192171095032306 · Twitter Post