2 matches found
CVE-2023-27253: XML Injection (aka Blind XPath Injection)
A command injection vulnerability in the function restorerrddata of Netgate pfSense v2.7.0 allows authenticated attackers to execute arbitrary commands via manipulating the contents of an XML file supplied to the component config.xml...
8.8CVSS6.2AI score0.89505EPSS
SaveExploits4References2
CVE-2023-27253
A command injection vulnerability in the function restorerrddata of Netgate pfSense v2.7.0 allows authenticated attackers to execute arbitrary commands via manipulating the contents of an XML file supplied to the component config.xml...
8.8CVSS0.89505EPSS
SaveExploits4References5
20