CVE-2020-23015
First published: Mon May 03 2021(Updated: )
An open redirect issue was discovered in OPNsense through 20.1.5. The redirect parameter "url" in login page was not filtered and can redirect user to any website.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| OPNsense | <=20.1.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this open redirect issue?
The vulnerability ID is CVE-2020-23015.
What is the severity level of CVE-2020-23015?
The severity level of CVE-2020-23015 is medium.
How does CVE-2020-23015 affect OPNsense?
CVE-2020-23015 affects OPNsense version up to and including 20.1.5.
What is the Common Weakness Enumeration (CWE) ID for this vulnerability?
The CWE ID for CVE-2020-23015 is CWE-601.
Is there a fix available for CVE-2020-23015?
Yes, the fix for CVE-2020-23015 is available in OPNsense version after 20.1.5.
- agent/type
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/softwarecombine
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/opnsense
- canonical/opnsense
- version/opnsense/20.1.5