Approved changes feed: RSS · Atom

cpe:2.3:a:netgate:pfsense:2.5.2:*:*:*:*:*:*:*

part: a version: 2.5.2 update: *

VendorNetgate (42bc912c-274f-5f68-8e52-e5d60c7dbf39)
ProductPfsense (5aa539db-9816-5834-bdbc-2e98c3f36341)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/pfsense/pfsense purl2cpe 2026-06-01 10:11:51.848453

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-46538 vulnerable 2026-06-03 14:56:59.595744 Details available
A cross-site scripting (XSS) vulnerability in pfsense v2.5.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the $pconfig variable at interfaces_groups_edit.php.
Published: 2024-10-22T00:00:00.000Z
Updated: 2024-10-22T18:51:47.447Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.