CVE-2023-42327
Cross Site Scripting (XSS) vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to gain privileges via a crafted URL to the…
published November 14, 2023
Patch now
High probability of exploitation
NVD has not assigned a CVSS score to this record. It sits in the 99.0th percentile for exploit probability.
What it is
Cross Site Scripting (XSS) vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to gain privileges via a crafted URL to the getserviceproviders.php page.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.55356 · 99.0th percentile
- Published
- 2023-11-14T00:00Z
EPSS history
Timeline