Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-38314
HistoryNov 17, 2023 - 6:15 a.m.

Null pointer dereference

2023-11-1706:15:00
PRIOn knowledge base
www.prio-n.com
3
opennds
null pointer dereference
captive portal
denial-of-service
http request
security issue

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.9%

An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a NULL pointer dereference in preauthenticated() that can be triggered with a crafted GET HTTP request with a missing redirect query string parameter. Triggering this issue results in crashing OpenNDS (a Denial-of-Service condition).

CPENameOperatorVersion
captive_portallt10.1.2

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.9%

Related for PRION:CVE-2023-38314