PT-2025-44175 · Ipfire · Ipfire

Alex Williams · Published 2025-10-28 · Updated 2025-10-29 · CVE-2025-34316

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IPFire versions prior to 2.29 (Core Update 198)

Description IPFire versions prior to 2.29 (Core Update 198) are susceptible to a stored cross-site scripting (XSS) issue. An authenticated attacker can inject arbitrary JavaScript code through the txt mailuser and txt mailpass parameters when updating mail server settings. The application sends an HTTP POST request to the ''/cgi-bin/mail.cgi'' endpoint, where the txt mailuser and txt mailpass parameters are used. The values from these parameters are stored and displayed in the web interface without sufficient sanitization, enabling the execution of injected scripts within the context of other users viewing the mail configuration.

Recommendations Update to IPFire version 2.29 (Core Update 198) or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-34316

Affected Products

Ipfire

References · 7

• https://osv.dev/vulnerability/CVE-2025-34316 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-34316 · Security Note
• https://bugzilla.ipfire.org/show_bug.cgi?id=13891 · Note
• https://twitter.com/VulmonFeeds/status/1983330759390753162 · Twitter Post
• https://vulncheck.com/advisories/ipfire-stored-xss-via-mail-server-settings · Note
• https://twitter.com/CVEnew/status/1983185719255290199 · Twitter Post
• https://ipfire.org/blog/ipfire-2-29-core-update-198-released · Patch, Vendor Advisory