CVE search · CVE-2023-42325
CVE-2023-42325
medium 5.4
Cross Site Scripting (XSS) vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to gain privileges via a crafted url to the status_logs_filter_dynamic.php page.
Details
- Status
- Modified
- Published
- Last changed
- Source
- cve@mitre.org
- Weakness
- CWE-79
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.1 | medium 5.4 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- netgate · pfsense
References
- https://docs.netgate.com/downloads/pfSense-SA-23_09.webgui.ascExploitVendor Advisory
- https://www.sonarsource.com/blog/pfsense-vulnerabilities-sonarcloud/
- https://docs.netgate.com/downloads/pfSense-SA-23_09.webgui.ascExploitVendor Advisory
- https://www.sonarsource.com/blog/pfsense-vulnerabilities-sonarcloud/