CVE-2023-38997

Опубликовано: 09 авг. 2023

Источник: nvd

CVSS3: 7.2

EPSS Низкий

Описание

A directory traversal vulnerability in the Captive Portal templates of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to execute arbitrary system commands as root via a crafted ZIP archive.

Ссылки

https://github.com/opnsense/core/commit/448762d440b51574f1906c0ec2f5ea6dc4f16eb2
Patch
https://logicaltrust.net/blog/2023/08/opnsense.html
Exploit
Third Party Advisory
https://github.com/opnsense/core/commit/448762d440b51574f1906c0ec2f5ea6dc4f16eb2
Patch
https://logicaltrust.net/blog/2023/08/opnsense.html
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:opnsense:opnsense:*:*:*:*:*:*:*:*

Версия до 23.7 (исключая)

EPSS

Процентиль: 77%

0.01049

Низкий

7.2 High

CVSS3

Дефекты

CWE-22

Связанные уязвимости

GHSA-h44v-883g-x8c3

CVSS3: 9.8

github

больше 2 лет назад

A directory traversal vulnerability in the Captive Portal templates of OPNsense before 23.7 allows attackers to execute arbitrary system commands as root via a crafted ZIP archive.

BDU:2024-00194