CVE Catalog
CVE-2023-38998
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk0.51%
39th percentile - higher than 39% of all known CVEs
Summary
An open redirect in the Login page of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to redirect a victim user to an arbitrary web site via a crafted URL.
Risk Assessment
This vulnerability may lead to phishing attacks and other threats that could compromise user security and organizational data.
Recommendation
It is recommended to update OPNsense to the latest version to mitigate this vulnerability and to monitor logs for potential exploitation attempts.
Original NVD description (English source)
An open redirect in the Login page of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to redirect a victim user to an arbitrary web site via a crafted URL.