CVE-2023-38998

2023-08-0919:15:14

Google

osv.dev

opnsense

open redirect

vulnerability

crafted url

arbitrary website

software

6.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.6%

JSON

An open redirect in the Login page of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to redirect a victim user to an arbitrary web site via a crafted URL.

CPENameOperatorVersion
coreeq15.7
coreeq17.1.r
coreeq22.1.b
coreeq19.1.b
coreeq18.7.r
coreeq15.1.2
coreeq15.1.8.1
coreeq17.1.a
coreeq15.1.8.3
coreeq15.1.7