CVE-2020-21487

Cross Site Scripting vulnerability found in Netgate pfSense 2.4.4 and ACME package v.0.6.3 allows attackers to execute arbitrary code via the RootFold...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Cross Site Scripting vulnerability found in Netgate pfSense 2.4.4 and ACME package v.0.6.3 allows attackers to execute arbitrary code via the RootFolder field of acme_certificates.php.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

patch github.com
patch redmine.pfsense.org