PT-2021-10309
CVE-2020-19204
·
تاريخ النشر
2021-07-12
·
تاريخ التحديث
2022-04-29
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
IPFire version 2.21 (x86 64) - Core Update 130
Description:
A Stored Cross-Site Scripting (XSS) issue exists, allowing an authenticated WebGUI user to execute Stored Cross-site Scripting in the Routing Table Entries via the "Remark" text box or
remark parameter in the "routing.cgi" Routing Table Entries.Recommendations:
For IPFire version 2.21 (x86 64) - Core Update 130, as a temporary workaround, consider restricting access to the "routing.cgi" Routing Table Entries or avoiding the use of the
remark parameter until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾