CVE-2025-50976

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

IPFire 2.29 DNS management interface (dns.cgi) fails to properly sanitize user-supplied input in the NAMESERVER, REMARK, and TLS_HOSTNAME query parameters, resulting in a reflected cross-site scripting (XSS) vulnerability.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/4rdr/proofs/blob/main/info/IPFire-2.29-Reflected-XSS-via-DNS.mdExploit, Third Party Advisory

Timeline

Published: Aug 26, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-509776.1A template injection vulnerability leading to reflected cross-site scripting (XSS) has been identified in version 1.7.1, requiring authentic CVE-2025-509786.1In Gitblit v1.7.1, a reflected cross-site scripting (XSS) vulnerability exists in the way repository path names are handled. By injecting a CVE-2025-509798.6NodeBB v4.3.0 is vulnerable to SQL injection in its search-categories API endpoint (/api/v3/search/categories). The search query parameter i CVE-2025-50989.1PrinterShare Android application allows the capture of Gmail authentication tokens that can be reused to access a user's Gmail account witho CVE-2025-509838.3SQL Injection vulnerability exists in the sortKey parameter of the GET /api/v1/wanted/cutoff API endpoint in readarr 0.4.15.2787. The endpoi CVE-2025-509845.3diskover-web v2.3.0 Community Edition is vulnerable to multiple boolean-based blind SQL injection flaws in its Elasticsearch configuration f CVE-2025-509855.6diskover-web v2.3.0 Community Edition is vulnerable to multiple reflected cross-site scripting (XSS) flaws in its web interface. Unsanitized CVE-2025-509865.6diskover-web v2.3.0 Community Edition suffers from multiple stored cross-site scripting (XSS) vulnerabilities in its administrative settings CVE-2025-509899.1OPNsense before 25.1.8 contains an authenticated command injection vulnerability in its Bridge Interface Edit endpoint (interfaces_bridge_ed CVE-2025-50999.8An Out of Bounds Write occurs when the native library attempts PDF rendering, which can be exploited to achieve memory corruption and potent CVE-2025-51008.0A double-free condition occurs during the cleanup of temporary image files, which can be exploited to achieve memory corruption and potentia CVE-2025-510057.5A heap-buffer-overflow vulnerability exists in the tcpliveplay utility of the tcpreplay-4.5.1. When a crafted pcap file is processed, the pr