Pfsense Security Vulnerabilities and Issues — Pfsense CVE List

Lucene search

NetgatePfsense

2 matches found

CVE•added 2020/04/01 4:15 p.m.•47 views

CVE-2020-11457

pfSense before 2.4.5 has stored XSS in system_usermanager_addprivs.php in the WebGUI via the descr parameter (aka full name) of a user.

5.4CVSS5.2AI score0.02722EPSS

CVE•added 2020/04/29 2:15 p.m.•35 views

CVE-2020-10797

An XSS vulnerability resides in the hostname field of the diag_ping.php page in pfsense before 2.4.5 version. After passing inputs to the command and executing this command, the $result variable is not sanitized before it is printed.

6.1CVSS6.1AI score0.0143EPSS