CVE-2023-38998

Summary

CVE-2023-38998 is a newly identified vulnerability affecting the Login page of OPNsense Community Edition before version 23.7 and Business Edition before version 23.4.2. This issue involves an open redirect, which gives attackers the ability to redirect unsuspecting users to malicious websites by crafting a specially designed URL. The potential consequences range from phishing scams to data theft and other cyber attacks. OPNsense users are advised to upgrade their systems to the latest versions to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.