Description
An open redirect issue was discovered in OPNsense through 20.1.5. The redirect parameter "url" in login page was not filtered and can redirect user to any website.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- OPNsense <=20.1.5 - Open Redirect http/cves/2020/CVE-2020-23015.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.