Hiroyuki Shinshiba

**Name of the Vulnerable Software and Affected Versions** FreeNAS versions prior to 0.7RC1 **Description** A cross-site request forgery issue exists in the WebGUI, allowing remote attackers to hijack user authentication for unspecified requests. **Recommendations** For versions prior to 0.7RC1, update to version 0.7RC1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** FreeNAS versions prior to 0.69.2 **Description** A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML. **Recommendations** For versions prior to 0.69.2, update to version 0.69.2 or later to resolve the issue.