Vulnerability in Netgate Pfsense
CVE-2014-4695
Multiple open redirect vulnerabilities in the Snort package before 3.0.13 for pfSense through 2.1.4 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via (1) the referer parameter to snort_rules_f…
EPSS: 0.021 (78.9th percentile) — read the EPSS interpretation.
Affected products
- Netgate Pfsense — versions 2.1.3
- Pfsense Snort_package
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)