CVE-2021-42770: Opnsense

Medium severity, CVSS 6.1. EPSS: 1.4% chance of exploitation in the next 30 days.

A Cross-site scripting (XSS) vulnerability was discovered in OPNsense before 21.7.4 via the LDAP attribute return in the authentication tester.

Affected products

• Opnsense Opnsense: up to and including 19.7.0; from 21.7.0, before 21.7.4 (fixed in 21.7.4)

Published 2021-11-08. Last modified 2026-06-17.