CVE-2020-21219

Cross Site Scripting (XSS) vulnerability in Netgate pf Sense 2.4.4-Release-p3 and Netgate ACME package 0.6.3 allows remote attackers to to run arbitra...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Cross Site Scripting (XSS) vulnerability in Netgate pf Sense 2.4.4-Release-p3 and Netgate ACME package 0.6.3 allows remote attackers to to run arbitrary code via the RootFolder field to acme_certificate_edit.php page of the ACME package.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory redmine.pfsense.org
patch github.com