Deciso OPNsense Security Vulnerability

Deciso OPNsense is a suite of FreeBSD-based open source firewall and routing software from Dutch company Deciso. A security vulnerability exists in Deciso OPNsense version 23.1, which stems from a failure to impose a rate limit on authentication. An attacker could use this vulnerability to perfor...

CVE-2023-27152

DECISO OPNsense 23.1 does not impose rate limits for authentication, allowing attackers to perform a brute-force attack to bypass authentication...

CVE-2023-27152

DECISO OPNsense 23.1 does not impose rate limits for authentication, allowing attackers to perform a brute-force attack to bypass authentication...

CVE-2023-27152

CVE-2023-27152 affects DECISO OPNsense 23.1 and is caused by not imposing rate limits on authentication, enabling brute‑force attempts to bypass authentication. Attack vector: network; impact: high confidentiality, integrity, and availability. No remediation details are provided in the supplied d...

CVE-2023-44275

OPNsense before 23.7.5 allows XSS via the index.php columncount parameter to the Lobby Dashboard...

CVE-2023-44276

OPNsense before 23.7.5 allows XSS via the index.php sequence parameter to the Lobby Dashboard...

CVE-2023-44275

OPNsense before 23.7.5 allows XSS via the index.php columncount parameter to the Lobby Dashboard...

CVE-2023-44276

OPNsense before 23.7.5 allows XSS via the index.php sequence parameter to the Lobby Dashboard...

Cross site scripting

OPNsense before 23.7.5 allows XSS via the index.php sequence parameter to the Lobby Dashboard...

Cross site scripting

OPNsense before 23.7.5 allows XSS via the index.php columncount parameter to the Lobby Dashboard...

CVE-2023-44276

OPNsense before 23.7.5 allows XSS via the index.php sequence parameter to the Lobby Dashboard...

Deciso OPNsense Cross-Site Scripting Vulnerability

Deciso OPNsense is a suite of FreeBSD-based open source firewall and routing software from Dutch company Deciso. A cross-site scripting vulnerability exists in OPNsense versions prior to 23.7.5. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

CVE-2023-44276

OPNsense before 23.7.5 allows XSS via the index.php sequence parameter to the Lobby Dashboard...

CVE-2023-44275

OPNsense before 23.7.5 allows XSS via the index.php columncount parameter to the Lobby Dashboard...

CVE-2023-44275

OPNsense before 23.7.5 allows XSS via the index.php columncount parameter to the Lobby Dashboard...

CVE-2023-44276

OPNsense before 23.7.5 is vulnerable to XSS via the index.php?sequence parameter in the Lobby Dashboard. Root cause: insufficient input handling for the sequence parameter in that endpoint. Impact: cross-site scripting may affect users viewing the Lobby Dashboard. Mitigation: upgrade to version 2...

CVE-2023-44275

OPNsense

Deciso OPNsense Cross-Site Scripting Vulnerability

Deciso OPNsense is a suite of FreeBSD-based open source firewall and routing software from Dutch company Deciso. A cross-site scripting vulnerability exists in OPNsense versions prior to 23.7.5. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

CVE-2023-44275

OPNsense before 23.7.5 allows XSS via the index.php columncount parameter to the Lobby Dashboard...

CVE-2023-44276

OPNsense before 23.7.5 allows XSS via the index.php sequence parameter to the Lobby Dashboard...