Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A directory traversal vulnerability in the Captive Portal templates of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to execute arbitrary system commands as root via a crafted ZIP archive.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Deciso OPNsense 路径遍历漏洞
Vulnerability Description
Deciso OPNsense是荷兰Deciso公司的一套基于FreeBSD的开源防火墙和路由软件。 OPNsense 23.7之前版本存在路径遍历漏洞，该漏洞源于Captive Portal模板存在目录遍历漏洞。攻击者可利用该漏洞通过设计ZIP存档以root身份执行任意系统命令。
CVSS Information
N/A
Vulnerability Type
N/A