PT-2025-44177 · Ipfire · Ipfire

Alex Williams · Published 2025-10-28 · Updated 2025-10-28 · CVE-2025-34318

Positive Technologies (AI Summary)

CVSS v4.0

5.1

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

Name of the Vulnerable Software and Affected Versions IPFire versions prior to 2.29 (Core Update 198)

Description IPFire versions prior to 2.29 (Core Update 198) are susceptible to a stored cross-site scripting (XSS) issue. An authenticated attacker can inject arbitrary JavaScript code through the TLS HOSTNAME, UPSTREAM USER, UPSTREAM PASSWORD, ADMIN MAIL ADDRESS, and ADMIN PASSWORD parameters. This occurs when adding a new DNS entry via an HTTP POST request to the /cgi-bin/dns.cgi endpoint. The application stores and renders these values in the web interface without proper sanitization or encoding, leading to script execution in the context of other users viewing the DNS configuration.

Recommendations Update to IPFire version 2.29 (Core Update 198) or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-34318

Affected Products

Ipfire

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-34318 · Security Note
• https://vulncheck.com/advisories/ipfire-stored-xss-via-dns-creation-proxy-cgi · Note
• https://bugzilla.ipfire.org/show_bug.cgi?id=13893 · Note
• https://twitter.com/CVEnew/status/1983185714004050311 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1983317960035848201 · Twitter Post
• https://ipfire.org/blog/ipfire-2-29-core-update-198-released · Patch, Vendor Advisory