| Package | Affected versions | Patched versions |
|---|---|---|
| pfsense | = 2.4.4< 2.4.4 | 2.4.4 |
An issue was discovered in pfSense through 2.4.4-p3. widgets/widgets/picture.widget.php uses the widgetkey parameter directly without sanitization (e.g., a basename call) for a pathname to file_get_contents or file_put_contents.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free