CVE-2021-42770

Description

A Cross-site scripting (XSS) vulnerability was discovered in OPNsense before 21.7.4 via the LDAP attribute return in the authentication tester.

Affected Platforms

Weakness Type

CWE-79

References

• https://cert.orange.com
• https://github.com/orangecertcc/security-research/security/advisories/GHSA-r32j-…
• https://opnsense.org/opnsense-21-7-4-released/
• https://cert.orange.com
• https://github.com/orangecertcc/security-research/security/advisories/GHSA-r32j-…
• https://opnsense.org/opnsense-21-7-4-released/