CVE-2022-42247

pfSense v2.5.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the browser.php component

published October 3, 2022

CVSS
—
EPSS
3%
Percentile
88.4
In the wild
Unconfirmed
What it is

pfSense v2.5.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the browser.php component. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into a file name.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03293 · 88.4th percentile
Published
2022-10-03T15:31Z
EPSS history
Timeline
  • 03 OCT 15:31Z
    pfSense v2.5.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the browser.php component
    cvelistv5