medium6.1
CVE-2022-29273
pfSense CE through 2.6.0 and pfSense Plus before 22.05 allow XSS in the WebGUI via URL Table Alias URL parameters.
Impact
pfSense CE through 2.6.0 and pfSense Plus before 22.05 allow XSS in the WebGUI via URL Table Alias URL parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgate | Pfsense | through 2.6.0 before 22.05 |
Weakness classification
References
- NVD record
- CVE.org record
- https://docs.netgate.com/downloads/pfSense-SA-22_05.webgui.asc
- https://docs.netgate.com/pfsense/en/latest/releases/index.html#current-and-upcoming-supported-releases
- https://redmine.pfsense.org/issues/13060
- https://docs.netgate.com/downloads/pfSense-SA-22_05.webgui.asc
- https://docs.netgate.com/pfsense/en/latest/releases/index.html#current-and-upcoming-supported-releases
- https://redmine.pfsense.org/issues/13060