← back
CVE-2022-36368

CVE-2022-36368

CVSS 4.8 MEDIUMEPSS 0.7%CWE-79
Multiple stored cross-site scripting vulnerabilities in the web user interface of IPFire versions prior to 2.27 allows a remote authenticated attacker with administrative privilege to inject an arbitrary script.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Affected products
IPFire Project · IPFire

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://blog.ipfire.org/post/ipfire-2-27-core-update-170-releasedhttps://bugzilla.ipfire.org/show_bug.cgi?id=12925https://github.com/ipfire/ipfire-2.xhttps://jvn.jp/en/jp/JVN15411362/index.html