PT-2025-44162 · Ipfire · Ipfire

Alex Williams · Published 2025-10-28 · Updated 2025-10-28 · CVE-2025-34303

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IPFire versions prior to 2.29 (Core Update 198)

Description IPFire versions prior to 2.29 (Core Update 198) are susceptible to a stored cross-site scripting (XSS) issue. An authenticated attacker can inject arbitrary JavaScript code through the IGNORE ENTRY REMARK parameter when adding a whitelisted host. The vulnerability occurs because the value of the IGNORE ENTRY REMARK parameter, submitted via an HTTP POST request to the /cgi-bin/ids.cgi Request-URI, is stored and rendered in the web interface without sufficient sanitization or encoding. This allows injected scripts to execute within the context of other users viewing the affected whitelist entry.

Recommendations Update to version 2.29 (Core Update 198) or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-34303

Affected Products

Ipfire

References · 6

• https://osv.dev/vulnerability/CVE-2025-34303 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-34303 · Security Note
• https://vulncheck.com/advisories/ipfire-stored-xss-via-whitelisted-host-creation · Note
• https://ipfire.org/blog/ipfire-2-29-core-update-198-released · Patch, Vendor Advisory
• https://twitter.com/CVEnew/status/1983185726133956865 · Twitter Post
• https://bugzilla.ipfire.org/show_bug.cgi?id=13878 · Note