{"id":"CVE-2019-12584","details":"Apcupsd 0.3.91_5, as used in pfSense through 2.4.4-RELEASE-p3 and other products, has an XSS issue in apcupsd_status.php.","modified":"2026-07-08T05:54:50.673895395Z","published":"2019-06-03T03:29:00.213Z","database_specific":{"unresolved_ranges":[{"extracted_events":[{"introduced":"0.3.91_5"},{"last_affected":"0.3.91_5"}],"source":"CPE_STRING","vendor_product":"apcupsd:apcupsd","cpes":["cpe:2.3:a:apcupsd:apcupsd:0.3.91_5:*:*:*:*:*:*:*"]}]},"references":[{"type":"WEB","url":"https://ctrsec.io/index.php/2019/05/28/cve-2019-12584-12585-command-injection-vulnerability-on-pfsense-2-4-4-release-p3/"},{"type":"ADVISORY","url":"https://redmine.pfsense.org/issues/9556"},{"type":"FIX","url":"https://github.com/pfsense/FreeBSD-ports/commit/b492c0ea47aba8dde2f14183e71498ba207594e3"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/pfsense/freebsd-ports","events":[{"introduced":"0"},{"fixed":"cce2c24e75bd0c986602bb7027d235c9dff7cde0"},{"introduced":"cce2c24e75bd0c986602bb7027d235c9dff7cde0"},{"last_affected":"3d2a117caf1fdca4b1c2495c5b0d20700cb0354c"},{"fixed":"b492c0ea47aba8dde2f14183e71498ba207594e3"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"2.4.4"},{"introduced":"2.4.4-NA"},{"last_affected":"2.4.4-NA"},{"introduced":"2.4.4-p1"},{"last_affected":"2.4.4-p1"},{"introduced":"2.4.4-p2"},{"last_affected":"2.4.4-p2"},{"introduced":"2.4.4-p3"},{"last_affected":"2.4.4-p3"}],"source":["CPE_RANGE","CPE_STRING","REFERENCES"],"cpe":["cpe:2.3:a:netgate:pfsense:*:*:*:*:*:*:*:*","cpe:2.3:a:netgate:pfsense:2.4.4:-:*:*:*:*:*:*","cpe:2.3:a:netgate:pfsense:2.4.4:p1:*:*:*:*:*:*","cpe:2.3:a:netgate:pfsense:2.4.4:p2:*:*:*:*:*:*","cpe:2.3:a:netgate:pfsense:2.4.4:p3:*:*:*:*:*:*"]}}],"versions":["2.4.4-NA","2.4.4-p1","2.4.4-p2","2.4.4-p3","v2.4.4_3","v2.4.4_2","v2.4.4_1","v2.4.4","devel_before_hashes_changed","END-OF-2015Q4"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-12584.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}