Cross Site Scripting (XSS) vulnerability in Netgate pf Sense 2.4.4-Release-p3 and Netgate ACME package 0.6.3 allows remote attackers to to run arbitrary code via the RootFolder field to acme_certificate_edit.php page of the ACME package.
References
Link | Resource |
---|---|
https://github.com/pfsense/FreeBSD-ports/commit/a6f443cde51e7fcf17e51f16014d3589253284d8 | Patch Third Party Advisory |
https://redmine.pfsense.org/issues/9888 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
19 Dec 2022, 16:46
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-12-15 19:15
Updated : 2024-02-04 23:14
NVD link : CVE-2020-21219
Mitre link : CVE-2020-21219
CVE.ORG link : CVE-2020-21219
JSON object : View
Products Affected
netgate
- pfsense
- acme
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')