CVE-2023-38999

MediumCVSS 6.5

Published: 09/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

24th percentile - higher than 24% of all known CVEs

Summary

A Cross-Site Request Forgery (CSRF) vulnerability in the System Halt API (/system/halt) of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to cause a Denial of Service (DoS) via a crafted GET request.

Risk Assessment

This vulnerability may lead to service disruption, affecting the availability of services within the organization.

Recommendation

It is recommended to update OPNsense to the latest version to mitigate this vulnerability and secure the system against potential attacks.

Original NVD description (English source)

A Cross-Site Request Forgery (CSRF) in the System Halt API (/system/halt) of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to cause a Denial of Service (DoS) via a crafted GET request.