ISOMAN

CVE

CVE-2022-29273

pfSense CE through 2.6.0 and pfSense Plus before 22.05 allow XSS in the WebGUI via URL Table Alias URL parameters.

Severity
MEDIUM
CVSS
6.1
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
pfSense CE2.6.0 amd64 ce isounknownsource
pfSense CE2.7.0 amd64 ce isounknownsource
pfSense CE2.6.0 amd64 ce memstickunknownsource
pfSense CE2.7.0 amd64 ce memstickunknownsource
pfSense CE2.6.0 amd64 ce memstick-adiunknownsource
pfSense CE2.7.0 amd64 ce memstick-adiunknownsource
pfSense CE2.6.0 amd64 ce memstick-serialunknownsource
pfSense CE2.7.0 amd64 ce memstick-serialunknownsource

References

  1. https://docs.netgate.com/downloads/pfSense-SA-22_05.webgui.asc
  2. https://docs.netgate.com/pfsense/en/latest/releases/index.html#current-and-upcoming-supported-releases
  3. https://redmine.pfsense.org/issues/13060
  4. https://docs.netgate.com/downloads/pfSense-SA-22_05.webgui.asc
  5. https://docs.netgate.com/pfsense/en/latest/releases/index.html#current-and-upcoming-supported-releases
  6. https://redmine.pfsense.org/issues/13060