Unrated severityNVD Advisory· Published Dec 15, 2022· Updated Apr 25, 2025

CVE-2020-21219

Description

Cross Site Scripting (XSS) vulnerability in Netgate pf Sense 2.4.4-Release-p3 and Netgate ACME package 0.6.3 allows remote attackers to to run arbitrary code via the RootFolder field to acme_certificate_edit.php page of the ACME package.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Netgate/pf Sense ACME packagedescription
Netgate/Pfsensellm-fuzzy
Range: = 2.4.4-RELEASE-p3

Patches

Vulnerability mechanics

References

github.com/pfsense/FreeBSD-ports/commit/a6f443cde51e7fcf17e51f16014d3589253284d8mitre
redmine.pfsense.org/issues/9888mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000