CVE-2020-23015

Published May 3rd, 2021

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

5.8

MEDIUM

Affected

PROJECT

Description

An open redirect issue was discovered in OPNsense through 20.1.5. The redirect parameter "url" in login page was not filtered and can redirect user to any website.

opnsense/core

OPNsense GUI, API and systems backend

GitHub

4.46K