CVE-2023-39007: XSS
Published Aug 9, 2023
·Updated
/ui/cron/item/open in the Cron component of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows XSS via openAction in app/controllers/OPNsense/Cron/ItemController.php.
Affected Software
1 affected component
OPNsense OPNsense<23.7
Remediation
Event History
Aug 9, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-39007.
2
What is the title of this vulnerability?
The title of this vulnerability is /ui/cron/item/open in the Cron component of OPNsense before 23.7 allows XSS.
3
What is the severity of CVE-2023-39007?
The severity of CVE-2023-39007 is critical.
4
How can I fix the vulnerability CVE-2023-39007?
To fix the vulnerability CVE-2023-39007, update OPNsense to version 23.7 or later.
5
Are there any references for CVE-2023-39007?
Yes, you can find references for CVE-2023-39007 at the following links: [1](https://github.com/opnsense/core/commit/5edff49db1cd8b5078611e2f542d91c02af2b25c), [2](https://logicaltrust.net/blog/2023/08/opnsense.html)