CVE-2020-23015

An open redirect issue was discovered in OPNsense through 20.1.5. The redirect parameter "url" in login page was not filtered and can redirect user to any website...

CVE-2020-23015

An open redirect issue was discovered in OPNsense through 20.1.5. The redirect parameter "url" in login page was not filtered and can redirect user to any website...

CVE-2020-23015

CVE-2020-23015 affects OPNsense up to version 20.1.5. The login page accepts a url parameter that is not filtered, enabling an open redirect to external sites. This could facilitate phishing or information exposure by redirecting authenticated users to malicious destinations. The connected Nuclei...