Cross site scripting

2022-10-2414:15:00

PRIOn knowledge base

www.prio-n.com

ipfire

cross-site scripting

web interface

vulnerabilities

remote attacker

administrative privilege

4.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.6%

JSON

Multiple stored cross-site scripting vulnerabilities in the web user interface of IPFire versions prior to 2.27 allows a remote authenticated attacker with administrative privilege to inject an arbitrary script.

CPENameOperatorVersion
ipfireeq2.27 core-update160
ipfireeq2.27 core-update161
ipfireeq2.27 core-update162
ipfireeq2.27 core-update163
ipfireeq2.27 core-update164
ipfireeq2.27 core-update165
ipfireeq2.27 core-update166
ipfireeq2.27 core-update167
ipfireeq2.27 core-update159
ipfirelt2.27

Name	Operator	Version
ipfire	eq	2.27 core-update160
ipfire	eq	2.27 core-update161
ipfire	eq	2.27 core-update162
ipfire	eq	2.27 core-update163
ipfire	eq	2.27 core-update164
ipfire	eq	2.27 core-update165
ipfire	eq	2.27 core-update166
ipfire	eq	2.27 core-update167
ipfire	eq	2.27 core-update159
ipfire	lt	2.27