CVE-2019-8953

MEDIO 6.1CVE-2019-8953 · Published 20/02/2019 · updated 17/06/2026

In breve

CVE-2019-8953 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda haproxy (netgate).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 52.2%, superiore al 99.0% delle vulnerabilità.
Correzione: aggiornare a 0.59_16 o successiva.

Package	Affected versions	Patched versions
haproxy netgate	`< 0.59_16`	`0.59_16`

Description

The HAProxy package before 0.59_16 for pfSense has XSS via the desc (aka Description) or table_actionsaclN parameter, related to haproxy_listeners.php and haproxy_listeners_edit.php.

References

cxsecurity.com/issue/WLB-2019020153 · Exploit
pfsense/FreeBSD-ports commit 2dded47 · Patch
pfsense/FreeBSD-ports commit 3b40366 · Patch
redmine.pfsense.org/issues/9335 · Patch
exploit-db.com/exploits/46538 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free