Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2022-42247
pfsense
cross-site scripting
xss vulnerability
browser.php
arbitrary web scripts
html
crafted payload
file name
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
42.8%
pfSense v2.5.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the browser.php component. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into a file name.
Affected configurations
Node
pfsensepfsenseMatch2.5.2
Related
osv
osv
CVE-2022-42247
2022-10-03 16:15:14
prion
prion
Cross site scripting
2022-10-03 16:15:00
cve
cve
CVE-2022-42247
2022-10-03 16:15:14
cvelist
cvelist
CVE-2022-42247
2022-10-03 15:31:48
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
42.8%
Related for NVD:CVE-2022-42247