PT-2022-11381

Name of the Vulnerable Software and Affected Versions pfSense version 2.5.2 Description The issue allows sed data injection in diag routes.php. Authenticated users can inject sed-specific code and write an arbitrary file in an arbitrary location. The data is retrieved by executing the netstat...