← All advisories

Medium severity6.1NVD Advisory· Published Nov 8, 2021· Updated Jun 17, 2026

CVE-2021-42770

CVE-2021-42770

Description

A Cross-site scripting (XSS) vulnerability was discovered in OPNsense before 21.7.4 via the LDAP attribute return in the authentication tester.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Opnsense/Opnsense2 versions
cpe:2.3:a:opnsense:opnsense:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:opnsense:opnsense:*:*:*:*:*:*:*:*range: <=19.7.0
- (no CPE)range: <21.7.4
OPNsense/OPNsensedescription

Patches

Vulnerability mechanics

References

3

github.com/orangecertcc/security-research/security/advisories/GHSA-r32j-xgg3-w2rwnvdExploitThird Party Advisory
cert.orange.comnvdThird Party Advisory
opnsense.org/opnsense-21-7-4-released/nvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.