CVE-2020-8430

The CVE-2020-8430 entry concerns Stormshield Network Security model 310 with version 3.7.10 and an Open Redirect vulnerability in the captive portal due to the auth/lang.html?rurl parameter. The issue allows an attacker to redirect users by supplying a crafted rurl value (e.g., rurl=//example.com...

PT-2020-20133

Name of the Vulnerable Software and Affected Versions Stormshield Network Security 310 version 3.7.10 Description The issue is related to an Open Redirect vulnerability on the captive portal of the affected device. This vulnerability can be exploited by manipulating the rurl parameter in the quer...

CVE-2020-8430: URL Redirection to Untrusted Site

Stormshield Network Security 310 3.7.10 devices have an auth/lang.html?rurl= Open Redirect vulnerability on the captive portal. For example, the attacker can use rurl=//example.com instead of rurl=https://example.com in the query string...