CVE-2020-21487

2023-04-0415:15:08

Google

osv.dev

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.7%

JSON

Cross Site Scripting vulnerability found in Netgate pfSense 2.4.4 and ACME package v.0.6.3 allows attackers to execute arbitrary code via the RootFolder field of acme_certificates.php.

CPENameOperatorVersion
freebsd-portseqEND-OF-2015Q4
freebsd-portseqdevel_before_hashes_changed
freebsd-portseqRoot_RELENG_1_2
freebsd-portseqRELENG_2_2_BETA
freebsd-portseq2.4.4

Name	Operator	Version
freebsd-ports	eq	END-OF-2015Q4
freebsd-ports	eq	devel_before_hashes_changed
freebsd-ports	eq	Root_RELENG_1_2
freebsd-ports	eq	RELENG_2_2_BETA
freebsd-ports	eq	2.4.4