Ipfire

CVEs (34)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2025-34314	Ipfire Ipfire	Med	0.35	5.4	0.00	Oct 28, 2025	IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the SRC, DST, and COMMENT parameters when creating a time constraint rule. When a user…
CVE-2025-34313	Ipfire Ipfire	Med	0.35	5.4	0.00	Oct 28, 2025	IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the QUOTA_USERS parameter when creating a user quota rule. When a user adds a new user…
CVE-2025-34310	Ipfire Ipfire	Med	0.35	5.4	0.00	Oct 28, 2025	IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the INC_SPD, OUT_SPD, DEFCLASS_INC, and DEFCLASS_OUT parameters when updating Quality of…
CVE-2025-34308	Ipfire Ipfire	Med	0.35	5.4	0.00	Oct 28, 2025	IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the UPDATE_VALUE parameter when updating the default time synchronization settings. When…
CVE-2025-34307	Ipfire Ipfire	Med	0.35	5.4	0.00	Oct 28, 2025	IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the pienumber parameter when updating the firewall country search defaults. When a user…
CVE-2025-34306	Ipfire Ipfire	Med	0.35	5.4	0.00	Oct 28, 2025	IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the pienumber parameter when updating the default firewall IP search values. When a user…
CVE-2025-34305	Ipfire Ipfire	Med	0.35	5.4	0.00	Oct 28, 2025	IPFire versions prior to 2.29 (Core Update 198) contain multiple stored cross-site scripting (XSS) vulnerabilities caused by a bug in the cleanhtml() function (/var/ipfire/header.pl) that fails to apply HTML-entity encoding to user input. When an authenticated user submits data…
CVE-2025-34303	Ipfire Ipfire	Med	0.35	5.4	0.00	Oct 28, 2025	IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the IGNORE_ENTRY_REMARK parameter when adding a whitelisted host. When a whitelisted host…
CVE-2025-34302	Ipfire Ipfire	Med	0.35	5.4	0.00	Oct 28, 2025	IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the PROT parameter when creating a new service. When a user adds a service, the application…
CVE-2025-50975	Ipfire Ipfire	Med	0.35	5.4	0.00	Aug 26, 2025	IPFire 2.29 web-based firewall interface (firewall.cgi) fails to sanitize several rule parameters such as PROT, SRC_PORT, TGT_PORT, dnatport, key, ruleremark, src_addr, std_net_tgt, and tgt_addr, allowing an authenticated administrator to inject persistent JavaScript. This…
CVE-2020-19204	Ipfire Ipfire	Med	0.35	5.4	0.01	Jul 12, 2021	An authenticated Stored Cross-Site Scriptiong (XSS) vulnerability exists in Lightning Wire Labs IPFire 2.21 (x86_64) - Core Update 130 in the "routing.cgi" Routing Table Entries via the "Remark" text box or "remark" parameter. It allows an authenticated WebGUI user to execute…
CVE-2020-19202	Ipfire Ipfire	Med	0.35	5.4	0.01	Jun 17, 2021	An authenticated Stored XSS (Cross-site Scripting) exists in the "captive.cgi" Captive Portal via the "Title of Login Page" text box or "TITLE" parameter in IPFire 2.21 (x86_64) - Core Update 130. It allows an authenticated WebGUI user with privileges to execute Stored…
CVE-2025-34318	Ipfire Ipfire	Med	0.33	—	0.00	Oct 28, 2025	IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the TLS_HOSTNAME, UPSTREAM_USER, UPSTREAM_PASSWORD, ADMIN_MAIL_ADDRESS, and ADMIN_PASSWORD…
CVE-2022-36368	Ipfire Ipfire	Med	0.31	4.8	0.01	Oct 24, 2022	Multiple stored cross-site scripting vulnerabilities in the web user interface of IPFire versions prior to 2.27 allows a remote authenticated attacker with administrative privilege to inject an arbitrary script.

CVE-2025-34314MedOct 28, 2025
Ipfire
Ipfire
risk 0.35cvss 5.4epss 0.00
IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the SRC, DST, and COMMENT parameters when creating a time constraint rule. When a user…
CVE-2025-34313MedOct 28, 2025
Ipfire
Ipfire
risk 0.35cvss 5.4epss 0.00
IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the QUOTA_USERS parameter when creating a user quota rule. When a user adds a new user…
CVE-2025-34310MedOct 28, 2025
Ipfire
Ipfire
risk 0.35cvss 5.4epss 0.00
IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the INC_SPD, OUT_SPD, DEFCLASS_INC, and DEFCLASS_OUT parameters when updating Quality of…
CVE-2025-34308MedOct 28, 2025
Ipfire
Ipfire
risk 0.35cvss 5.4epss 0.00
IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the UPDATE_VALUE parameter when updating the default time synchronization settings. When…
CVE-2025-34307MedOct 28, 2025
Ipfire
Ipfire
risk 0.35cvss 5.4epss 0.00
IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the pienumber parameter when updating the firewall country search defaults. When a user…
CVE-2025-34306MedOct 28, 2025
Ipfire
Ipfire
risk 0.35cvss 5.4epss 0.00
IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the pienumber parameter when updating the default firewall IP search values. When a user…
CVE-2025-34305MedOct 28, 2025
Ipfire
Ipfire
risk 0.35cvss 5.4epss 0.00
IPFire versions prior to 2.29 (Core Update 198) contain multiple stored cross-site scripting (XSS) vulnerabilities caused by a bug in the cleanhtml() function (/var/ipfire/header.pl) that fails to apply HTML-entity encoding to user input. When an authenticated user submits data…
CVE-2025-34303MedOct 28, 2025
Ipfire
Ipfire
risk 0.35cvss 5.4epss 0.00
IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the IGNORE_ENTRY_REMARK parameter when adding a whitelisted host. When a whitelisted host…
CVE-2025-34302MedOct 28, 2025
Ipfire
Ipfire
risk 0.35cvss 5.4epss 0.00
IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the PROT parameter when creating a new service. When a user adds a service, the application…
CVE-2025-50975MedAug 26, 2025
Ipfire
Ipfire
risk 0.35cvss 5.4epss 0.00
IPFire 2.29 web-based firewall interface (firewall.cgi) fails to sanitize several rule parameters such as PROT, SRC_PORT, TGT_PORT, dnatport, key, ruleremark, src_addr, std_net_tgt, and tgt_addr, allowing an authenticated administrator to inject persistent JavaScript. This…
CVE-2020-19204MedJul 12, 2021
Ipfire
Ipfire
risk 0.35cvss 5.4epss 0.01
An authenticated Stored Cross-Site Scriptiong (XSS) vulnerability exists in Lightning Wire Labs IPFire 2.21 (x86_64) - Core Update 130 in the "routing.cgi" Routing Table Entries via the "Remark" text box or "remark" parameter. It allows an authenticated WebGUI user to execute…
CVE-2020-19202MedJun 17, 2021
Ipfire
Ipfire
risk 0.35cvss 5.4epss 0.01
An authenticated Stored XSS (Cross-site Scripting) exists in the "captive.cgi" Captive Portal via the "Title of Login Page" text box or "TITLE" parameter in IPFire 2.21 (x86_64) - Core Update 130. It allows an authenticated WebGUI user with privileges to execute Stored…
CVE-2025-34318MedOct 28, 2025
Ipfire
Ipfire
risk 0.33cvss —epss 0.00
IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the TLS_HOSTNAME, UPSTREAM_USER, UPSTREAM_PASSWORD, ADMIN_MAIL_ADDRESS, and ADMIN_PASSWORD…
CVE-2022-36368MedOct 24, 2022
Ipfire
Ipfire
risk 0.31cvss 4.8epss 0.01
Multiple stored cross-site scripting vulnerabilities in the web user interface of IPFire versions prior to 2.27 allows a remote authenticated attacker with administrative privilege to inject an arbitrary script.

Page 2 of 2