PT-2021-10307 · Ipfire · Ipfire

Dharmesh Baskaran · Published 2021-06-17 · Updated 2021-06-22 · CVE-2020-19202

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: IPFire version 2.21 (x86 64) - Core Update 130

Description: The issue is related to an authenticated Stored XSS (Cross-site Scripting) in the Captive Portal page. This occurs via the TITLE parameter or the "Title of Login Page" text box in the "captive.cgi" Captive Portal. It allows an authenticated WebGUI user with privileges to execute Stored Cross-site Scripting.

Recommendations: For IPFire version 2.21 (x86 64) - Core Update 130, consider restricting access to the Captive Portal page until a fix is available. As a temporary workaround, avoid using the TITLE parameter in the "captive.cgi" Captive Portal to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-19202

Affected Products

Ipfire

References · 4

• 🔥 https://gist.github.com/dharmeshbaskaran/2825ee8ae48b9065193c07a92b3a712c · Exploit
• https://blog.ipfire.org/post/ipfire-2-23-core-update-132-released · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-19202 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-19202 · Security Note