PT-2025-44174 · Ipfire · Ipfire

Alex Williams · Published 2025-10-28 · Updated 2025-10-29 · CVE-2025-34315

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IPFire versions prior to 2.29 (Core Update 198)

Description IPFire versions prior to 2.29 (Core Update 198) are susceptible to a stored cross-site scripting (XSS) issue. An authenticated attacker can inject arbitrary JavaScript code through the REMOTELOG ADDR parameter when updating the remote syslog server address. The application issues an HTTP POST request to /cgi-bin/logs.cgi/config.dat where the server address is provided in the REMOTELOG ADDR parameter. The value of this parameter is stored and rendered in the web interface without proper sanitation or encoding, enabling injected scripts to execute in the context of other users viewing the affected configuration page.

Recommendations Update to version 2.29 (Core Update 198) or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-34315

Affected Products

Ipfire

References · 7

• https://osv.dev/vulnerability/CVE-2025-34315 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-34315 · Security Note
• https://vulncheck.com/advisories/ipfire-stored-xss-via-remote-syslog-server-address · Note
• https://twitter.com/CVEnew/status/1983185722245800068 · Twitter Post
• https://bugzilla.ipfire.org/show_bug.cgi?id=13890 · Note
• https://ipfire.org/blog/ipfire-2-29-core-update-198-released · Patch, Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1983333319023415547 · Twitter Post