pfSense is a popular open-source firewall solution by Netgate and is sold as pfSense Plus installed on ready-made firewall appliances to protect and manage office networks and also distributed for free as the pfSense Community Edition (CE). SonarCloud found these vulnerabilities using taint analysis. pfSense CE 2.7.0 and below, pfSense Plus 23.05.1 and below are vulnerable to two XSS vulnerabilities and a Command Injection vulnerability (CVE-2023-42325, CVE-2023-42327, CVE-2023-42326).
The security vulnerabilities are fixed in pfSense CE 2.7.1 and pfSense Plus 23.09.
View the comprehensive security vulnerabilities impact, technical details, timeline and patches on our blog post: https://sonarsource.com/blog/pfsense-...
Also visit Sonar's SAST Solution: https://www.sonarsource.com/solutions...
Follow us on socials for more developer tips & tricks:
/ sonarsource
/ sonarsource
Смотрите видео pfSense Security Vulnerabilities: Discovery & Demonstration on test Instance with SonarCloud онлайн без регистрации, длительностью часов минут секунд в хорошем качестве. Это видео добавил пользователь Sonar 12 Декабрь 2023, не забудьте поделиться им ссылкой с друзьями и знакомыми, на нашем сайте его посмотрели 1,804 раз и оно понравилось like людям.