Description
IPFire 2.29 DNS management interface (dns.cgi) fails to properly sanitize user-supplied input in the NAMESERVER, REMARK, and TLS_HOSTNAME query parameters, resulting in a reflected cross-site scripting (XSS) vulnerability.
Medium · 6.1
CVE-2025-50976
EUVD-2025-28379GHSA-38c8-9gf3-wcfw
IPFire 2.29 DNS management interface (dns.cgi) fails to properly sanitize user-supplied input in the NAMESERVER, REMARK, and TLS_HOSTNAME q…
Published Aug 26, 2025 · Updated Aug 27, 2025 · Assigned by mitre