CVE-2017-1000479

pfSense versions 2.4.1 and lower are vulnerable to clickjacking attacks in the CSRF error page resulting in privileged execution of arbitrary code, because the error detection occurs before an X-Frame-Options header is set. This is fixed in 2.4.2-RELEASE. OPNsense, a 2015 fork of pfSense, was not vulnerable since version 16.1.16 released on June 06, 2016. The unprotected web form was removed from the code during an internal security audit under "possibly insecure" suspicions.

• CWE-352

• http://www.openwall.com/lists/oss-security/2017/11/22/7Exploit, Mailing List, Third Party Advisory
• https://doc.pfsense.org/index.php/2.4.2_New_Features_and_ChangesIssue Tracking, Vendor Advisory
• https://github.com/opnsense/core/commit/d218b225Patch, Third Party Advisory
• https://github.com/pfsense/pfsense/commit/386d89b07Patch, Third Party Advisory
• https://www.netgate.com/blog/pfsense-2-4-2-release-p1-and-2-3-5-release-p1-now-available.htmlThird Party Advisory
• https://www.securify.nl/en/advisory/SFY20171101/clickjacking-vulnerability-in-csrf-error-page-pfsense.htmlExploit, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2017/11/22/7Exploit, Mailing List, Third Party Advisory
• https://doc.pfsense.org/index.php/2.4.2_New_Features_and_ChangesIssue Tracking, Vendor Advisory
• https://github.com/opnsense/core/commit/d218b225Patch, Third Party Advisory
• https://github.com/pfsense/pfsense/commit/386d89b07Patch, Third Party Advisory
• https://www.netgate.com/blog/pfsense-2-4-2-release-p1-and-2-3-5-release-p1-now-available.htmlThird Party Advisory
• https://www.securify.nl/en/advisory/SFY20171101/clickjacking-vulnerability-in-csrf-error-page-pfsense.htmlExploit, Third Party Advisory

Published

Jan 3, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1000473Linux Dash up to version v2 is vulnerable to multiple comman…
• CVE-2017-1000474Soyket Chowdhury Vehicle Sales Management System version 201…
• CVE-2017-1000475FreeSSHd 1.3.1 version is vulnerable to an Unquoted Path Ser…
• CVE-2017-1000476ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was…
• CVE-2017-1000477XMLBundle version 0.1.7 is vulnerable to XXE attacks which c…
• CVE-2017-1000478ELabftw version 1.7.8 is vulnerable to stored cross-site scr…
• CVE-2017-1000480Smarty 3 before 3.1.32 is vulnerable to a PHP code injection…
• CVE-2017-1000481When you visit a page where you need to login, Plone 2.5-5.1…
• CVE-2017-1000482A member of the Plone 2.5-5.1rc1 site could set javascript i…
• CVE-2017-1000483Accessing private content via str.format in through-the-web …
• CVE-2017-1000484By linking to a specific url in Plone 2.5-5.1rc1 with a para…
• CVE-2017-1000485Nylas Mail Lives 2.2.2 uses 0755 permissions for $HOME/.nyla…