Lucene search
HistoryNov 14, 2023 - 4:15 a.m.
CVE-2023-42325
cve-2023-42325
cross site scripting
xss
netgate
pfsense
remote attacker
privilege escalation
security vulnerability.
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
5.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
35.7%
Cross Site Scripting (XSS) vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to gain privileges via a crafted url to the status_logs_filter_dynamic.php page.
Affected configurations
Node
netgatepfsenseMatch2.7.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| netgate:pfsense | netgate pfsense | eq | 2.7.0 |
Related
prion
prion
Cross site scripting
2023-11-14 04:15:00
cvelist
cvelist
CVE-2023-42325
2023-11-14 00:00:00
nvd
nvd
CVE-2023-42325
2023-11-14 04:15:07
thn
thn
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
5.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
35.7%
Related for CVE-2023-42325