Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2020-19204

An authenticated Stored Cross-Site Scriptiong (XSS) vulnerability exists in Lightning Wire Labs IPFire 2.21 (x86_64) - Core Update 130 in the "routing.cgi" Routing Table Entries via the "Remark" text box or "remark" parameter. It allows an authenticated WebGUI user to execute Stored Cross-site Scripting in the Routing Table Entries.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 66.5%
CVSS Severity
CVSS v3 Score 5.4
CVSS v2 Score 3.5
Products affected by CVE-2020-19204
  • Ipfire » Ipfire » Version: 2.21
    cpe:2.3:a:ipfire:ipfire:2.21


Contact Us

Shodan ® - All rights reserved