CVE-2020-19204

Description

References

• blog.ipfire.org/post/ipfire-2-23-core-update-133-has-been-released · Release Notes
• gist.github.com/dharmeshbaskaran/1fdc069c0ad729d12bf3304b5f19b02d · Mitigation
• lightningwirelabs.com · Third Party Advisory

Autres vulnérabilités de ipfire

• CVE-2019-25400MOYENNE 5.4IPFire 2.21 Core Update 127 contains multiple reflected cross-site scripting vulnerabilities in the fwhosts.cgi script that allow attackers …
• CVE-2019-25399MOYENNE 6.4IPFire 2.21 Core Update 127 contains multiple stored cross-site scripting vulnerabilities in the extrahd.cgi script that allow attackers to …
• CVE-2019-25398MOYENNE 6.1IPFire 2.21 Core Update 127 contains multiple cross-site scripting vulnerabilities in the ovpnmain.cgi script that allow attackers to inject…
• CVE-2019-25397MOYENNE 6.1IPFire 2.21 Core Update 127 contains multiple reflected cross-site scripting vulnerabilities in the hosts.cgi script that allow attackers to…
• CVE-2019-25396MOYENNE 6.1IPFire 2.21 Core Update 127 contains a reflected cross-site scripting vulnerability in the updatexlrator.cgi script that allows attackers to…