pfSense CE Suricata Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in the Suricata package for pfSense CE. The issue occurs in the file '/usr/local/www/suricata/suricata_filecheck.php', where the 'filehash' parameter is displayed without proper HTML sanitization. This vulnerability can be exploited if the victim is authenticated.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Remediation

Users can update to the latest pfSense package build, which is now available for Plus 25.07.1, Plus 25.07, CE 2.8.1, and CE 2.8.0.