CVE-2021-42770

CVE-2021-42770 affects OPNsense prior to 21.7.4. The vulnerability is a Cross-site Scripting (XSS) flaw that can be triggered via the LDAP attribute return in the authentication tester. Impact is limited to contexts that render the affected LDAP attribute data in a user’s browser; no exploitation...