CVE-2020-23015

An open redirect issue was discovered in OPNsense through 20.1.5. The redirect parameter "url" in login page was not filtered and can redirect user to any website...

CVE-2020-23015

CVE-2020-23015 affects OPNsense up to version 20.1.5. The login page accepts a url parameter that is not filtered, enabling an open redirect to external sites. This could facilitate phishing or information exposure by redirecting authenticated users to malicious destinations. The connected Nuclei...

CVE-2020-23015

An open redirect issue was discovered in OPNsense through 20.1.5. The redirect parameter "url" in login page was not filtered and can redirect user to any website...