PT-2020-20133

Name of the Vulnerable Software and Affected Versions Stormshield Network Security 310 version 3.7.10 Description The issue is related to an Open Redirect vulnerability on the captive portal of the affected device. This vulnerability can be exploited by manipulating the rurl parameter in the quer...

CVE-2020-8430: URL Redirection to Untrusted Site

Stormshield Network Security 310 3.7.10 devices have an auth/lang.html?rurl= Open Redirect vulnerability on the captive portal. For example, the attacker can use rurl=//example.com instead of rurl=https://example.com in the query string...