Description
OPNsense 19.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by exploiting insufficient input validation in the host parameter. Attackers can submit crafted POST requests to the diag_ping.php endpoint with script payloads in the host parameter to execute arbitrary JavaScript in users' browsers.
Problem types
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Product status
Credits
Ozer Goker
References
www.exploit-db.com/exploits/46351 (ExploitDB-46351)
opnsense.org (OPNsense Official Website)
forum.opnsense.org/index.php?topic=11469.0 (OPNsense 19.1.1 Release Announcement)
www.vulncheck.com/.../opnsense-reflected-xss-via-diagpingphp (VulnCheck Advisory: OPNsense 19.1 Reflected XSS via diag_ping.php)