CVE-2023-38315

OpenNDS Captive Portal (before 10.1.2) is affected by a NULL pointer dereference in try_to_authenticate triggered by a crafted GET with a missing client token parameter, leading to a Denial-of-Service (crash). A fix is available: update OpenNDS to 10.1.3, which was applied in OpenWrt master, Open...

CVE-2023-38315

An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a trytoauthenticate NULL pointer dereference that can be triggered with a crafted GET HTTP with a missing client token query string parameter. Triggering this issue results in crashing OpenNDS a Denial-of-Service...