PT-2023-11591 · Unknown+1 · Acme Package+1

CVE-2020-21487

·

Publicado

2023-04-04

·

Atualizado

2023-04-10

CVSS v3.1

9.6

Crítica

VetorAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions pfSense version 2.4.4 ACME package version 0.6.3
Description A Cross Site Scripting issue allows attackers to execute arbitrary code via the RootFolder field of "acme certificates.php".
Recommendations For pfSense version 2.4.4, update the ACME package to a version that fixes this issue. For ACME package version 0.6.3, avoid using the RootFolder field in the "acme certificates.php" until the issue is resolved.

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2020-21487

Produtos afetados

Acme Package
Pfsense