Unrated

An XSS vulnerability resides in the hostname field of the diag_ping.php page in pfsense before 2.4.5 version. After passing inputs to the command and...

CVE-2020-10797 First seen on SecPulse Apr 29, 2020

Original description The description as published by the source.

An XSS vulnerability resides in the hostname field of the diag_ping.php page in pfsense before 2.4.5 version. After passing inputs to the command and executing this command, the $result variable is not sanitized before it is printed.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory docs.netgate.com
patch github.com
report redmine.pfsense.org

Key facts

Severity: Unrated
Published: Apr 29, 2020
First seen on SecPulse: Apr 29, 2020

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:51