Netgate Pfsense Acme Package vulnerabilities

1 known vulnerability affecting netgate/pfsense_acme_package.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2020-21487CRITICALCVSS 9.6v0.6.32023-04-04

CVE-2020-21487 [CRITICAL] CWE-79 CVE-2020-21487: Cross Site Scripting vulnerability found in Netgate pfSense 2.4.4 and ACME package v.0.6.3 allows at Cross Site Scripting vulnerability found in Netgate pfSense 2.4.4 and ACME package v.0.6.3 allows attackers to execute arbitrary code via the RootFolder field of acme_certificates.php.