CVE-2019-25375 in OPNsenseinformation

Résumé

par MITRE • 15/02/2026

OPNsense 19.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted input to the mailserver parameter. Attackers can send POST requests to the monit interface with JavaScript payloads in the mailserver parameter to execute arbitrary code in users' browsers.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

VulnCheck

Réserver

15/02/2026

Divulgation

15/02/2026

Modérer

accepté

Entrée

VDB-346149

CPE

prêt

CWE

CWE-79 (confirmé)

Exploitation

Télécharger

CVSS

6.1 (CNA)

EPSS

0.00360

KEV

non

Activités

très faible

Sources

MITRE	https://www.cve.org/CVERecord?id=CVE-2019-25375
NVD	https://nvd.nist.gov/vuln/detail/CVE-2019-25375
CVE Details	https://www.cvedetails.com/cve/CVE-2019-25375/

◂ Précédent Aperçu Suivant ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!