CVE-2019-8953

3 known exploits for CVE-2019-8953

The HAProxy package before 0.59_16 for pfSense has XSS via the desc (aka Description) or table_actionsaclN parameter, related to haproxy_listeners.php and haproxy_listeners_edit.php.

Affected products: Haproxy
Netgate Haproxy: < 0.59_16

Fix: Available
CVSS 3.0: 6.1 MEDIUM
EPSS: 78.3% (100th percentile)
Weakness: CWE-79
NVD status: Modified
Published: 2019-02-20

CVE-2019-8953 at NVD

Authoritative description, scoring and affected products

pfSense 2.4.4-p1 (HAProxy Package 0.59_14) - Persistent Cross-Site Scripting

2019-03-13 Gionathan RealeEXPLOITDB

pfSense 2.4.4-p1 (HAProxy Package 0.59_14) Cross Site Scripting

2019-03-13 Gionathan RealePACKETSTORM

pfSense 2.4.4-p1 (HAProxy Package 0.59_14) - Persistent Cross-Site Scripting Vulnerability

2019-03-13 Gionathan RealeZDT