PT-2026-8249 · Opnsense · Opnsense
CVSS v3.1
6.1
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
OPNsense version 19.1
Description
OPNsense 19.1 contains a reflected cross-site scripting issue in the
/system advanced sysctl.php API endpoint. Attackers can inject malicious scripts through the value parameter. By crafting POST requests with script payloads in the value parameter, attackers can execute JavaScript within the context of authenticated user sessions.Recommendations
Apply a fix to address the reflected cross-site scripting issue in the
/system advanced sysctl.php endpoint.Exploit
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Opnsense