Cross-site Scripting Vulnerability in pfSense Products by Netgate

CVE-2021-20729

What is CVE-2021-20729?

A cross-site scripting vulnerability exists in pfSense CE and pfSense Plus, where a remote attacker can inject arbitrary scripts through malicious URLs. This can lead to unauthorized actions performed by users, compromising the security of the affected systems. Users of pfSense CE versions 2.5.2 and earlier, as well as pfSense Plus versions 21.05 and earlier, are advised to update to the latest software versions to mitigate potential exploits.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References