Lucene search
HistoryNov 14, 2023 - 4:15 a.m.
CVE-2023-42327
cve
2023
42327
cross site scripting
xss
netgate
pfsense
nvd
vulnerability
remote attacker
privileges
crafted url
getserviceproviders.php page
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
5.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
35.7%
Cross Site Scripting (XSS) vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to gain privileges via a crafted URL to the getserviceproviders.php page.
Affected configurations
Node
netgatepfsenseMatch2.7.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| netgate:pfsense | netgate pfsense | eq | 2.7.0 |
Related
prion
prion
Cross site scripting
2023-11-14 04:15:00
cvelist
cvelist
CVE-2023-42327
2023-11-14 00:00:00
nvd
nvd
CVE-2023-42327
2023-11-14 04:15:07
thn
thn
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
5.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
35.7%
Related for CVE-2023-42327