Unrated severityNVD Advisory· Published Jul 2, 2014· Updated May 6, 2026
CVE-2014-4689
CVE-2014-4689
Description
Absolute path traversal vulnerability in pkg_edit.php in pfSense before 2.1.4 allows remote attackers to read arbitrary XML files via a full pathname in the xml parameter.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- pfsense.org/security/advisories/pfSense-SA-14_11.webgui.ascnvdVendor Advisory
News mentions
0No linked articles in our index yet.