Critical severity9.6NVD Advisory· Published Apr 4, 2023· Updated Jun 17, 2026
CVE-2020-21487
CVE-2020-21487
Description
Cross Site Scripting vulnerability found in Netgate pfSense 2.4.4 and ACME package v.0.6.3 allows attackers to execute arbitrary code via the RootFolder field of acme_certificates.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- cpe:2.3:a:netgate:pfsense_acme_package:0.6.3:*:*:*:*:*:*:*
- Range: v.0.6.3
Patches
Vulnerability mechanics
References
2- github.com/pfsense/FreeBSD-ports/commit/a6f443cde51e7fcf17e51f16014d3589253284d8nvdPatch
- redmine.pfsense.org/issues/9888nvdIssue TrackingPatch
News mentions
0No linked articles in our index yet.