CVE-2023-39000

A reflected cross-site scripting XSS vulnerability in the component /ui/diagnostics/log/core/ of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to inject arbitrary JavaScript via the URL path...

CVE-2023-39000

OPNsense Community Edition before 23.7 and OPNsense Business Edition before 23.4.2 contain a reflected XSS in /ui/diagnostics/log/core/ that allows an attacker to inject arbitrary JavaScript via the URL path. Root cause is likely improper validation/escaping of the path component. Reported impact...

CVE-2023-39000

A reflected cross-site scripting XSS vulnerability in the component /ui/diagnostics/log/core/ of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to inject arbitrary JavaScript via the URL path...