CVE-2023-42327 XSS in Netgate pfSense 2.7.0 getserviceproviders.php Priv Esc
CVE-2023-42327 Published on November 14, 2023

Cross Site Scripting (XSS) vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to gain privileges via a crafted URL to the getserviceproviders.php page.

NVD


Products Associated with CVE-2023-42327

Want to know whenever a new CVE is published for Netgate Pfsense? stack.watch will email you.

Netgate Pfsense
 

Exploit Probability

EPSS
48.31%
Percentile
97.69%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.