Skip to content
OpenAdvisories

Product · IPFire.org

IPFire

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • Medium 5.1
    CVE-2025-34307

    IPFire < v2.29 Stored XSS via Default Country Search

    IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the pienumber parameter when updating the firewall country search defau…

    IPFire.org IPFire
  • Medium 5.1
    CVE-2025-34306

    IPFire < v2.29 Stored XSS via Default IP Search Value

    IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the pienumber parameter when updating the default firewall IP search va…

    IPFire.org IPFire
  • Medium 5.1
    CVE-2025-34308

    IPFire < v2.29 Stored XSS via Default Time Sync

    IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the UPDATE_VALUE parameter when updating the default time synchronizati…

    IPFire.org IPFire
  • Medium 5.1
    CVE-2025-34318

    IPFire < v2.29 Stored XSS via DNS Creation (proxy.cgi)

    IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the TLS_HOSTNAME, UPSTREAM_USER, UPSTREAM_PASSWORD, ADMIN_MAIL_ADDRESS,…

    IPFire.org IPFire
  • Medium 5.1
    CVE-2025-34317

    IPFire < v2.29 Stored XSS via DNS Creation (dns.cgi)

    IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the TLS_HOSTNAME parameter when adding a new DNS entry. When a user add…

    IPFire.org IPFire
  • Medium 5.1
    CVE-2025-34309

    IPFire < v2.29 Stored XSS via Dynamic DNS Host

    IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the SERVICE, LOGIN, and PASSWORD parameters when creating or editing a …

    IPFire.org IPFire
  • Medium 5.1
    CVE-2025-34301

    IPFire < v2.29 Stored XSS via Location Group Creation

    IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code into the COUNTRY_CODE parameter when creating a location group. When a user add…

    IPFire.org IPFire
  • Medium 5.1
    CVE-2025-34316

    IPFire < v2.29 Stored XSS via Mail Server Settings

    IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the txt_mailuser and txt_mailpass parameters when updating the mail ser…

    IPFire.org IPFire
  • Medium 5.1
    CVE-2025-34305

    IPFire < v2.29 Stored XSS via Multiple Methods in cleanhtml()

    IPFire versions prior to 2.29 (Core Update 198) contain multiple stored cross-site scripting (XSS) vulnerabilities caused by a bug in the cleanhtml() function (/var/ipfire/header.pl) that fails to apply HTML-entity encoding to user input. When an authenticate…

    IPFire.org IPFire
  • Medium 5.1
    CVE-2025-34310

    IPFire < v2.29 Stored XSS via Quality of Service (QoS) Settings

    IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the INC_SPD, OUT_SPD, DEFCLASS_INC, and DEFCLASS_OUT parameters when up…

    IPFire.org IPFire
  • Medium 5.1
    CVE-2025-34315

    IPFire < v2.29 Stored XSS via Remote Syslog Server Address

    IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the REMOTELOG_ADDR parameter when updating the remote syslog server add…

    IPFire.org IPFire
  • Medium 5.1
    CVE-2025-34302

    IPFire < v2.29 Stored XSS via Service Creation

    IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the PROT parameter when creating a new service. When a user adds a serv…

    IPFire.org IPFire
  • Medium 5.1
    CVE-2025-34314

    IPFire < v2.29 Stored XSS via Time Constraint Rule URL Filter

    IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the SRC, DST, and COMMENT parameters when creating a time constraint ru…

    IPFire.org IPFire
  • Medium 5.1
    CVE-2025-34313

    IPFire < v2.29 Stored XSS via User Quota Rule URL Filter

    IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the QUOTA_USERS parameter when creating a user quota rule. When a user …

    IPFire.org IPFire
  • Medium 5.1
    CVE-2025-34303

    IPFire < v2.29 Stored XSS via Whitelisted Host Creation

    IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the IGNORE_ENTRY_REMARK parameter when adding a whitelisted host. When …

    IPFire.org IPFire