Threats tagged 'ghsa-m36h-h52c-mgjw'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2025-34315IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows Medium5.12025-10-28GCVE DatabaseCVE-2025-34315 IPFire versions prior to 2.29 (Core Update 198) have a stored cross-site scripting (XSS) vulnerability. This flaw allows an authenticated attacker to inject arbitrary JavaScript code via the REMOTELOG_ADDR parameter when updating the remote syslog server address. The injected script executes in the context of other users viewing the affected configuration page due to improper sanitization of the stored parameter. Report on CVE-2025-34315 Vulnerability CWE-79 #ghsa-m36h-h52c-mgjw	GCVE Database	2025-10-28

Page 1 of 1