Description
Absolute path traversal vulnerability in pkg_edit.php in pfSense before 2.1.4 allows remote attackers to read arbitrary XML files via a full pathname in the xml parameter.
Unscored
CVE-2014-4689
EUVD-2014-4608GHSA-w63g-ppv3-jp39
Absolute path traversal vulnerability in pkg_edit.php in pfSense before 2.1.4 allows remote attackers to read arbitrary XML files via a ful…
Published Jul 2, 2014 · Updated Aug 6, 2024 · Assigned by mitre