CVE-2024-46538

Merci àphysicszq, qui a découvert cette vulnérabilité. CVE-2024-46538 ★ CVE-2024-46538 PfSense Stored XSS menant à l'exécution de code arbitraire PoC ★ Description CVE-2024-46538 : vulnérabilité Stored XSS dans PfSense description : Une vulnérabilité de cross-site scripting XSS dans pfsense v2.5....

CVE-2024-46538

Ce billet est un article de recherche publié par EQSTLab. Merci àphysicszq, qui a découvert cette vulnérabilité. CVE-2024-46538 ★ CVE-2024-46538 XSS stocké PfSense menant à l'exécution de code arbitraire PoC ★ https://github.com/user-attachments/assets/f41d0945-b7f4-4f88-bac5-265904256aae...

The vulnerability of the $pconfig variable in the interfaces_groups_edit.php file of the software network interface controller based on the FreeBSD Netgate pfSense operating system allows a hacker to execute arbitrary code.

The vulnerability of the $pconfig variable in the interfacesgroups Edit.php file of the software network interface layer based on the FreeBSD Netgate pfSense operating system is related to the lack of security measures for the website structure. Exploiting this vulnerability allows a remote...

CVE-2024-46538

A cross-site scripting XSS vulnerability in pfsense v2.5.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the $pconfig variable at interfacesgroupsedit.php...