Lucene search

PRIOn knowledge basePRION:CVE-2023-38316

HistoryNov 17, 2023 - 6:15 a.m.

Input validation

2023-11-1706:15:00

PRIOn knowledge base

www.prio-n.com

opennds

captive portal

command execution

http

security issue

8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

30.1%

JSON

An issue was discovered in OpenNDS Captive Portal before version 10.1.2. When the custom unescape callback is enabled, attackers can execute arbitrary OS commands by inserting them into the URL portion of HTTP GET requests.

CPENameOperatorVersion
captive_portallt10.1.2

CPE	Name	Operator	Version
	captive_portal	lt	10.1.2

References

github.com/openNDS/openNDS/releases/tag/v10.1.2