CVE-2019-8953

The HAProxy package before 0.59_16 for pfSense has XSS via the desc (aka Description) or table_actionsaclN parameter, related to haproxy_listeners.php and…

published February 20, 2019

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.0th percentile for exploit probability.

CVSS
—
EPSS
52%
Percentile
99.0
In the wild
Unconfirmed
What it is

The HAProxy package before 0.59_16 for pfSense has XSS via the desc (aka Description) or table_actionsaclN parameter, related to haproxy_listeners.php and haproxy_listeners_edit.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.52236 · 99.0th percentile
Published
2019-02-20T16:00Z
EPSS history
Timeline
  • 22 SEP 03:18Z
    EPSS moved 52% → 78%
    epss
  • 06 SEP 03:13Z
    EPSS moved 52% → 78%
    epss
  • 30 AUG 16:02Z
    EPSS moved 78% → 52%
    epss
  • 29 AUG 04:57Z
    EPSS moved 52% → 78%
    epss
  • 20 FEB 16:00Z
    The HAProxy package before 0.59_16 for pfSense has XSS via the desc (aka Description) or table_actionsaclN parameter, related to haproxy_listeners.php and…
    cvelistv5