CNNVD-202509-1203 Information
CNNVD ID
CNNVD-202509-1203
Related CVE
- CNNVD Published: 2025-09-09
Description (Chinese)
Netgate pfSense CE是Netgate公司的一个基于FreeBSD的开源防火墙与路由平台，支持企业级网络安全与网络管理功能。 Netgate pfSense CE存在安全漏洞，该漏洞源于showsticktablecontent参数未经验证，可能导致反射型跨站脚本攻击。
Description (English)
Netgate pfSense CE, an open-source firewall and route platform based on FreeBSD for Netgate, supports enterprise-level network security and network management functions. The Netgate pfSense CE has a security loophole, which stems from unverified showsticktable parameters, which may result in a reflector-type cross-site script attack.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
NETGATE
Published
2025-09-09
Last Modified
2026-02-24
References
https://github.com/pfsense/FreeBSD-ports/commit/04d1328ab077830eb57a24bb7018c812b6358c64 https://redmine.pfsense.org/issues/16411 https://access.redhat.com/security/cve/cve-2025-34172 https://vigilance.fr/vulnerability/pfSense-CE-Cross-Site-Scripting-via-haproxy-stats-php-48190
Patch
https://www.pfsense.org/download/
Share on: