VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Oct 28, 2025· Updated Jun 17, 2026

CVE-2025-34309

CVE-2025-34309

Description

IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the SERVICE, LOGIN, and PASSWORD parameters when creating or editing a Dynamic DNS host. When a new Dynamic DNS host is added, the application issues an HTTP POST request to /cgi-bin/ddns.cgi and saves the values of the LOGIN, PASSWORD, and SERVICE parameters. The SERVICE value is displayed after the host entry is created, and the LOGIN and PASSWORD values are displayed when that host entry is edited. The values of these parameters are stored and later rendered in the web interface without proper sanitation or encoding, allowing injected scripts to execute in the context of other users who view or edit the affected Dynamic DNS entries.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

18
  • Ipfire/Ipfire17 versions
    cpe:2.3:a:ipfire:ipfire:*:*:*:*:*:*:*:*+ 16 more
    • cpe:2.3:a:ipfire:ipfire:*:*:*:*:*:*:*:*range: <2.29
    • cpe:2.3:a:ipfire:ipfire:2.29:core_update183:*:*:*:*:*:*
    • cpe:2.3:a:ipfire:ipfire:2.29:core_update184:*:*:*:*:*:*
    • cpe:2.3:a:ipfire:ipfire:2.29:core_update185:*:*:*:*:*:*
    • cpe:2.3:a:ipfire:ipfire:2.29:core_update186:*:*:*:*:*:*
    • cpe:2.3:a:ipfire:ipfire:2.29:core_update187:*:*:*:*:*:*
    • cpe:2.3:a:ipfire:ipfire:2.29:core_update188:*:*:*:*:*:*
    • cpe:2.3:a:ipfire:ipfire:2.29:core_update189:*:*:*:*:*:*
    • cpe:2.3:a:ipfire:ipfire:2.29:core_update190:*:*:*:*:*:*
    • cpe:2.3:a:ipfire:ipfire:2.29:core_update191:*:*:*:*:*:*
    • cpe:2.3:a:ipfire:ipfire:2.29:core_update192:*:*:*:*:*:*
    • cpe:2.3:a:ipfire:ipfire:2.29:core_update193:*:*:*:*:*:*
    • cpe:2.3:a:ipfire:ipfire:2.29:core_update194:*:*:*:*:*:*
    • cpe:2.3:a:ipfire:ipfire:2.29:core_update195:*:*:*:*:*:*
    • cpe:2.3:a:ipfire:ipfire:2.29:core_update196:*:*:*:*:*:*
    • cpe:2.3:a:ipfire:ipfire:2.29:core_update197:*:*:*:*:*:*
    • (no CPE)range: <2.29 (Core Update 198)
  • IPFire.org/IPFirev5
    Range: 0

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.