pfsense-crash-reporter-xss

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-crash-reporter-xss pfsense-crash-reporter-xss Class: XSS Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org /tmp/PHPerrors.log goes through htmlspecialchars. /var/crash/ is filegetcontents into...

CVE-2023-39006: Improper Neutralization of Input During Web Page Generation

The Crash Reporter crashreporter.php component of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 mishandles input sanitization...