CVE-2022-36368

Multiple stored cross-site scripting vulnerabilities in the web user interface of IPFire versions prior to 2.27 allows a remote authenticated attacker with administrative privilege to inject an arbitrary script...

CVE-2022-36368

Multiple stored cross-site scripting vulnerabilities in the web user interface of IPFire versions prior to 2.27 allows a remote authenticated attacker with administrative privilege to inject an arbitrary script...

IPFire has multiple vulnerabilities

IPFire is a free Linux-based firewall. Cross-site scripting and remote code execution vulnerabilities exist in versions of IPFire prior to 2.17. An attacker could exploit these vulnerabilities to steal cookie-based authentication or execute arbitrary commands in an affected application...