CVE-2025-34313 | IPFire up to 2.28 Web Interface /cgi-bin/urlfilter.cgi QUOTA_USERS cross site scripting

October 28, 2025 Yanac

A vulnerability was found in IPFire up to 2.28. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /cgi-bin/urlfilter.cgi of the component Web Interface. Performing manipulation of the argument QUOTA_USERS results in cross site scripting.

This vulnerability is cataloged as CVE-2025-34313. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More