IPFire 2.29 Reflected Cross-Site Scripting Vulnerability in DNS Management Interface

A reflected cross-site scripting vulnerability has been identified in IPFire 2.29 within the DNS management interface (dns.cgi). The issue arises because the application fails to properly sanitize user input in the NAMESERVER, REMARK, and TLS_HOSTNAME query parameters. This lack of input validation allows for the injection of malicious scripts that are reflected back to the user.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, access the DNS management interface at 'https://<IPFire_IP>:444/cgi-bin/dns.cgi'. Inject a script into one of the vulnerable query parameters: NAMESERVER, REMARK, or TLS_HOSTNAME. The injected script will be executed, demonstrating the cross-site scripting vulnerability.