Description (CNA)
Multiple stored cross-site scripting vulnerabilities in the web user interface of IPFire versions prior to 2.27 allows a remote authenticated attacker with administrative privilege to inject an arbitrary script.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IPFire Project / IPFire | affected versions prior to 2.27 |
CWE
No CWE identifiers supplied.
References
- https://blog.ipfire.org/post/ipfire-2-27-core-update-170-released
- https://bugzilla.ipfire.org/show_bug.cgi?id=12925
- https://github.com/ipfire/ipfire-2.x
- https://jvn.jp/en/jp/JVN15411362/index.html
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.