CVE Catalog
CVE-2023-39006
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk0.41%
33th percentile - higher than 33% of all known CVEs
Summary
The Crash Reporter (crash_reporter.php) component of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 mishandles input sanitization.
Risk Assessment
Improper input sanitization may lead to attacks such as code injection, posing a threat to the security of the system and user data.
Recommendation
It is recommended to update OPNsense to the latest version to mitigate this vulnerability and ensure proper input sanitization.
Original NVD description (English source)
The Crash Reporter (crash_reporter.php) component of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 mishandles input sanitization.