Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
OPNsense 19.1 Stored XSS via system_advanced_sysctl.php
Vulnerability Description
OPNsense 19.1 contains a stored cross-site scripting vulnerability in the system_advanced_sysctl.php endpoint that allows attackers to inject persistent malicious scripts via the tunable parameter. Attackers can submit POST requests with script payloads that are stored and executed in the context of authenticated user sessions when the page is viewed.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Deciso OPNsense 跨站脚本漏洞
Vulnerability Description
Deciso OPNsense是荷兰Deciso公司的一套基于FreeBSD的开源防火墙和路由软件。 Deciso OPNsense 19.1版本存在跨站脚本漏洞，该漏洞源于system_advanced_sysctl.php端点中tunable参数存在存储型跨站脚本漏洞，可能导致在已验证用户会话环境中执行持久性恶意脚本。
CVSS Information
N/A
Vulnerability Type
N/A