2 matches found
CVE-2023-39000
A reflected cross-site scripting XSS vulnerability in the component /ui/diagnostics/log/core/ of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to inject arbitrary JavaScript via the URL path...
6.1CVSS0.00572EPSS
SaveExploits1References4
CVE-2023-39000: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripting XSS vulnerability in the component /ui/diagnostics/log/core/ of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to inject arbitrary JavaScript via the URL path...
6.1CVSS6.2AI score0.00572EPSS
SaveExploits1References2
20