GCVE - cpe:2.3:a:ipfire:ipfire:2.21:core

Approved changes feed: RSS · Atom

cpe:2.3:a:ipfire:ipfire:2.21:core_update130:*:*:*:*:*:*

part: a version: 2.21 update: core_update130

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
`pkg:github/ipfire/ipfire-2.x`	purl2cpe	2026-06-01 10:14:49.912563

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-19204`	vulnerable	2026-06-08 05:20:57.219612	Details available An authenticated Stored Cross-Site Scriptiong (XSS) vulnerability exists in Lightning Wire Labs IPFire 2.21 (x86_64) - Core Update 130 in the "routing.cgi" Routing Table Entries via the "Remark" text box or "remark" parameter. It allows an authenticated WebGUI user to execute Stored Cross-site Scripting in the Routing Table Entries. Published: 2021-07-12T15:22:38.000Z Updated: 2024-08-04T14:08:30.799Z Open on db.gcve.eu Reference links https://www.lightningwirelabs.com https://blog.ipfire.org/post/ipfire-2-23-core-update-133-has-been-released https://gist.github.com/dharmeshbaskaran/1fdc069c0ad729d12bf3304b5f19b02d	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-19202`	vulnerable	2026-06-08 05:20:57.217022	Details available An authenticated Stored XSS (Cross-site Scripting) exists in the "captive.cgi" Captive Portal via the "Title of Login Page" text box or "TITLE" parameter in IPFire 2.21 (x86_64) - Core Update 130. It allows an authenticated WebGUI user with privileges to execute Stored Cross-site Scripting in the Captive Portal page. Published: 2021-06-17T15:22:58.000Z Updated: 2024-08-04T14:08:30.655Z Open on db.gcve.eu Reference links https://gist.github.com/dharmeshbaskaran/2825ee8ae48b9065193c07a92b3a712c https://blog.ipfire.org/post/ipfire-2-23-core-update-132-released	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.