CVE-2019-25398
MEDIUMIPFire 2.21 Core Update 127 - Cross-Site Scripting via ovpnmain.cgi VPN Configuration Parameters
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2019-25398. PoCs published by Ozer Goker.
AI-analyzed exploit summary The exploit demonstrates multiple reflected and stored XSS vulnerabilities in IPFire 2.21 Core Update 127 by providing specific URLs, methods, parameters, and payloads for each vulnerability. It includes detailed steps to reproduce the XSS attacks in the web interface.
Description
IPFire 2.21 Core Update 127 contains multiple cross-site scripting vulnerabilities in the ovpnmain.cgi script that allow attackers to inject malicious scripts through VPN configuration parameters. Attackers can submit POST requests with script payloads in parameters like VPN_IP, DMTU, ccdname, ccdsubnet, DOVPN_SUBNET, DHCP_DOMAIN, DHCP_DNS, DHCP_WINS, ROUTES_PUSH, FRAGMENT, KEEPALIVE_1, and KEEPALIVE_2 to execute arbitrary JavaScript in administrator browsers.
Exploits (1)
The exploit demonstrates multiple reflected and stored XSS vulnerabilities in IPFire 2.21 Core Update 127 by providing specific URLs, methods, parameters, and payloads for each vulnerability. It includes detailed steps to reproduce the XSS attacks in the web interface.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N