Medium severity5.4NVD Advisory· Published Nov 14, 2023· Updated Jun 17, 2026

CVE-2023-42325

Description

Cross Site Scripting (XSS) vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to gain privileges via a crafted url to the status_logs_filter_dynamic.php page.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Netgate/Pfsense3 versions
cpe:2.3:a:netgate:pfsense:2.7.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:netgate:pfsense:2.7.0:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: 2.7.0

Patches

Vulnerability mechanics

References

docs.netgate.com/downloads/pfSense-SA-23_09.webgui.ascnvdExploitVendor Advisory
www.sonarsource.com/blog/pfsense-vulnerabilities-sonarcloud/nvd

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.046
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000