CVE-2019-12347
In pfSense 2.4.4-p3, a stored XSS vulnerability occurs when attackers inject a payload into the Name or Description field via an acme_accountkeys_edit.php action. The vulnerability occurs due to input validation errors.
- Affected products
- Pfsense
- Netgate Pfsense
- = 2.4.4
- CVSS 3.0
- 6.1 MEDIUM
- EPSS
- 58.6% (99th percentile)
- Weakness
- CWE-79
- NVD status
- Modified
- Published
- 2019-05-29
CVE-2019-12347 at NVD
2 known exploits for CVE-2019-12347
Proof-of-concept code and exploit modules indexed by Sploitus