CVE-2020-23015

An open redirect issue was discovered in OPNsense through 20.1.5. The redirect parameter "url" in login page was not filtered and can redirect user to any website.

CVSS v3.1

6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CVSS v2.0

5.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N

EPSS

2.69% chance of exploitation in the next 30 days, 85th percentile

Nuclei

medium · CWE-601

Published

2021-05-03

Updated

2024-08-04

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-23015.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2020-23014
• CVE-2020-23036
• CVE-2020-22907
• CVE-2020-23037
• CVE-2020-22886
• CVE-2020-23038