CVE-2019-16914
on github
Published
Severity
CVSS v3:
6.1 MEDIUM
CVSS v2:
4.3 MEDIUM
Description
An XSS issue was discovered in pfSense through 2.4.4-p3. In services_captiveportal_mac.php, the username and delmac parameters are displayed without sanitization.
References
Configurations
CPE23 | Version Start | Version End | Exact Version |
---|---|---|---|
cpe:2.3:a:netgate:pfsense:*:*:*:*:*:*:*:* | n/a | 2.4.4 | * |
cpe:2.3:a:netgate:pfsense:2.4.4:p1:*:*:*:*:*:* | n/a | n/a | 2.4.4 |
cpe:2.3:a:netgate:pfsense:2.4.4:p3:*:*:*:*:*:* | n/a | n/a | 2.4.4 |
cpe:2.3:a:netgate:pfsense:2.4.4:p2:*:*:*:*:*:* | n/a | n/a | 2.4.4 |
cpe:2.3:a:netgate:pfsense:2.4.4:-:*:*:*:*:*:* | n/a | n/a | 2.4.4 |