Non évaluée

An XSS vulnerability resides in the hostname field of the diag_ping.php page in pfsense before 2.4.5 version. After passing inputs to the command and...

CVE-2020-10797 Première détection SecPulse Apr 29, 2020

Description d'origine La description telle que publiée par la source (souvent en anglais).

An XSS vulnerability resides in the hostname field of the diag_ping.php page in pfsense before 2.4.5 version. After passing inputs to the command and executing this command, the $result variable is not sanitized before it is printed.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory docs.netgate.com
patch github.com
report redmine.pfsense.org

Faits clés

Gravité: Non évaluée
Publication: Apr 29, 2020
Première détection SecPulse: Apr 29, 2020

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:51