CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-38997

A directory traversal vulnerability in the Captive Portal templates of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to execute arbitrary system commands as root via a crafted ZIP archive.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 65.7%

CVSS Severity

CVSS v3 Score 7.2

References

Products affected by CVE-2023-38997

Opnsense » Opnsense » Version: 15.1

cpe:2.3:a:opnsense:opnsense:15.1
Opnsense » Opnsense » Version: 15.1.1

cpe:2.3:a:opnsense:opnsense:15.1.1
Opnsense » Opnsense » Version: 15.1.10

cpe:2.3:a:opnsense:opnsense:15.1.10
Opnsense » Opnsense » Version: 15.1.10.1

cpe:2.3:a:opnsense:opnsense:15.1.10.1
Opnsense » Opnsense » Version: 15.1.10.2

cpe:2.3:a:opnsense:opnsense:15.1.10.2
Opnsense » Opnsense » Version: 15.1.11

cpe:2.3:a:opnsense:opnsense:15.1.11
Opnsense » Opnsense » Version: 15.1.11.1

cpe:2.3:a:opnsense:opnsense:15.1.11.1
Opnsense » Opnsense » Version: 15.1.11.2

cpe:2.3:a:opnsense:opnsense:15.1.11.2
Opnsense » Opnsense » Version: 15.1.11.3

cpe:2.3:a:opnsense:opnsense:15.1.11.3
Opnsense » Opnsense » Version: 15.1.11.4

cpe:2.3:a:opnsense:opnsense:15.1.11.4
Opnsense » Opnsense » Version: 15.1.12

cpe:2.3:a:opnsense:opnsense:15.1.12
Opnsense » Opnsense » Version: 15.1.2

cpe:2.3:a:opnsense:opnsense:15.1.2
Opnsense » Opnsense » Version: 15.1.3

cpe:2.3:a:opnsense:opnsense:15.1.3
Opnsense » Opnsense » Version: 15.1.4

cpe:2.3:a:opnsense:opnsense:15.1.4
Opnsense » Opnsense » Version: 15.1.5

cpe:2.3:a:opnsense:opnsense:15.1.5
Opnsense » Opnsense » Version: 15.1.6

cpe:2.3:a:opnsense:opnsense:15.1.6
Opnsense » Opnsense » Version: 15.1.6.1

cpe:2.3:a:opnsense:opnsense:15.1.6.1
Opnsense » Opnsense » Version: 15.1.7

cpe:2.3:a:opnsense:opnsense:15.1.7
Opnsense » Opnsense » Version: 15.1.7.1

cpe:2.3:a:opnsense:opnsense:15.1.7.1
Opnsense » Opnsense » Version: 15.1.7.2

cpe:2.3:a:opnsense:opnsense:15.1.7.2
Opnsense » Opnsense » Version: 15.1.8

cpe:2.3:a:opnsense:opnsense:15.1.8
Opnsense » Opnsense » Version: 15.1.8.1

cpe:2.3:a:opnsense:opnsense:15.1.8.1
Opnsense » Opnsense » Version: 15.1.8.2

cpe:2.3:a:opnsense:opnsense:15.1.8.2
Opnsense » Opnsense » Version: 15.1.8.3

cpe:2.3:a:opnsense:opnsense:15.1.8.3
Opnsense » Opnsense » Version: 15.1.8.4

cpe:2.3:a:opnsense:opnsense:15.1.8.4
Opnsense » Opnsense » Version: 15.1.9

cpe:2.3:a:opnsense:opnsense:15.1.9
Opnsense » Opnsense » Version: 15.1.9.1

cpe:2.3:a:opnsense:opnsense:15.1.9.1
Opnsense » Opnsense » Version: 15.1.9.2

cpe:2.3:a:opnsense:opnsense:15.1.9.2
Opnsense » Opnsense » Version: 15.7

cpe:2.3:a:opnsense:opnsense:15.7
Opnsense » Opnsense » Version: 15.7.1

cpe:2.3:a:opnsense:opnsense:15.7.1
Opnsense » Opnsense » Version: 15.7.10

cpe:2.3:a:opnsense:opnsense:15.7.10
Opnsense » Opnsense » Version: 15.7.11

cpe:2.3:a:opnsense:opnsense:15.7.11
Opnsense » Opnsense » Version: 15.7.12

cpe:2.3:a:opnsense:opnsense:15.7.12
Opnsense » Opnsense » Version: 15.7.13

cpe:2.3:a:opnsense:opnsense:15.7.13
Opnsense » Opnsense » Version: 15.7.14

cpe:2.3:a:opnsense:opnsense:15.7.14
Opnsense » Opnsense » Version: 15.7.15

cpe:2.3:a:opnsense:opnsense:15.7.15
Opnsense » Opnsense » Version: 15.7.16

cpe:2.3:a:opnsense:opnsense:15.7.16
Opnsense » Opnsense » Version: 15.7.17

cpe:2.3:a:opnsense:opnsense:15.7.17
Opnsense » Opnsense » Version: 15.7.18

cpe:2.3:a:opnsense:opnsense:15.7.18
Opnsense » Opnsense » Version: 15.7.19

cpe:2.3:a:opnsense:opnsense:15.7.19
Opnsense » Opnsense » Version: 15.7.2

cpe:2.3:a:opnsense:opnsense:15.7.2
Opnsense » Opnsense » Version: 15.7.20

cpe:2.3:a:opnsense:opnsense:15.7.20
Opnsense » Opnsense » Version: 15.7.21

cpe:2.3:a:opnsense:opnsense:15.7.21
Opnsense » Opnsense » Version: 15.7.22

cpe:2.3:a:opnsense:opnsense:15.7.22
Opnsense » Opnsense » Version: 15.7.23

cpe:2.3:a:opnsense:opnsense:15.7.23
Opnsense » Opnsense » Version: 15.7.24

cpe:2.3:a:opnsense:opnsense:15.7.24
Opnsense » Opnsense » Version: 15.7.25

cpe:2.3:a:opnsense:opnsense:15.7.25
Opnsense » Opnsense » Version: 15.7.3

cpe:2.3:a:opnsense:opnsense:15.7.3
Opnsense » Opnsense » Version: 15.7.4

cpe:2.3:a:opnsense:opnsense:15.7.4
Opnsense » Opnsense » Version: 15.7.5

cpe:2.3:a:opnsense:opnsense:15.7.5
Opnsense » Opnsense » Version: 15.7.6

cpe:2.3:a:opnsense:opnsense:15.7.6
Opnsense » Opnsense » Version: 15.7.7

cpe:2.3:a:opnsense:opnsense:15.7.7
Opnsense » Opnsense » Version: 15.7.8

cpe:2.3:a:opnsense:opnsense:15.7.8
Opnsense » Opnsense » Version: 15.7.9

cpe:2.3:a:opnsense:opnsense:15.7.9
Opnsense » Opnsense » Version: 15.7.99

cpe:2.3:a:opnsense:opnsense:15.7.99
Opnsense » Opnsense » Version: 16.1

cpe:2.3:a:opnsense:opnsense:16.1
Opnsense » Opnsense » Version: 16.1.1

cpe:2.3:a:opnsense:opnsense:16.1.1
Opnsense » Opnsense » Version: 16.1.10

cpe:2.3:a:opnsense:opnsense:16.1.10
Opnsense » Opnsense » Version: 16.1.11

cpe:2.3:a:opnsense:opnsense:16.1.11
Opnsense » Opnsense » Version: 16.1.12

cpe:2.3:a:opnsense:opnsense:16.1.12
Opnsense » Opnsense » Version: 16.1.13

cpe:2.3:a:opnsense:opnsense:16.1.13
Opnsense » Opnsense » Version: 16.1.14

cpe:2.3:a:opnsense:opnsense:16.1.14
Opnsense » Opnsense » Version: 16.1.15

cpe:2.3:a:opnsense:opnsense:16.1.15
Opnsense » Opnsense » Version: 16.1.16

cpe:2.3:a:opnsense:opnsense:16.1.16
Opnsense » Opnsense » Version: 16.1.17

cpe:2.3:a:opnsense:opnsense:16.1.17
Opnsense » Opnsense » Version: 16.1.18

cpe:2.3:a:opnsense:opnsense:16.1.18
Opnsense » Opnsense » Version: 16.1.19

cpe:2.3:a:opnsense:opnsense:16.1.19
Opnsense » Opnsense » Version: 16.1.2

cpe:2.3:a:opnsense:opnsense:16.1.2
Opnsense » Opnsense » Version: 16.1.20

cpe:2.3:a:opnsense:opnsense:16.1.20
Opnsense » Opnsense » Version: 16.1.3

cpe:2.3:a:opnsense:opnsense:16.1.3
Opnsense » Opnsense » Version: 16.1.4

cpe:2.3:a:opnsense:opnsense:16.1.4
Opnsense » Opnsense » Version: 16.1.5

cpe:2.3:a:opnsense:opnsense:16.1.5
Opnsense » Opnsense » Version: 16.1.6

cpe:2.3:a:opnsense:opnsense:16.1.6
Opnsense » Opnsense » Version: 16.1.7

cpe:2.3:a:opnsense:opnsense:16.1.7
Opnsense » Opnsense » Version: 16.1.8

cpe:2.3:a:opnsense:opnsense:16.1.8
Opnsense » Opnsense » Version: 16.1.9

cpe:2.3:a:opnsense:opnsense:16.1.9
Opnsense » Opnsense » Version: 16.7

cpe:2.3:a:opnsense:opnsense:16.7
Opnsense » Opnsense » Version: 16.7.1

cpe:2.3:a:opnsense:opnsense:16.7.1
Opnsense » Opnsense » Version: 16.7.10

cpe:2.3:a:opnsense:opnsense:16.7.10
Opnsense » Opnsense » Version: 16.7.11

cpe:2.3:a:opnsense:opnsense:16.7.11
Opnsense » Opnsense » Version: 16.7.12

cpe:2.3:a:opnsense:opnsense:16.7.12
Opnsense » Opnsense » Version: 16.7.13

cpe:2.3:a:opnsense:opnsense:16.7.13
Opnsense » Opnsense » Version: 16.7.14

cpe:2.3:a:opnsense:opnsense:16.7.14
Opnsense » Opnsense » Version: 16.7.2

cpe:2.3:a:opnsense:opnsense:16.7.2
Opnsense » Opnsense » Version: 16.7.3

cpe:2.3:a:opnsense:opnsense:16.7.3
Opnsense » Opnsense » Version: 16.7.4

cpe:2.3:a:opnsense:opnsense:16.7.4
Opnsense » Opnsense » Version: 16.7.5

cpe:2.3:a:opnsense:opnsense:16.7.5
Opnsense » Opnsense » Version: 16.7.6

cpe:2.3:a:opnsense:opnsense:16.7.6
Opnsense » Opnsense » Version: 16.7.7

cpe:2.3:a:opnsense:opnsense:16.7.7
Opnsense » Opnsense » Version: 16.7.8

cpe:2.3:a:opnsense:opnsense:16.7.8
Opnsense » Opnsense » Version: 16.7.9

cpe:2.3:a:opnsense:opnsense:16.7.9
Opnsense » Opnsense » Version: 17.1

cpe:2.3:a:opnsense:opnsense:17.1
Opnsense » Opnsense » Version: 17.1.1

cpe:2.3:a:opnsense:opnsense:17.1.1
Opnsense » Opnsense » Version: 17.1.10

cpe:2.3:a:opnsense:opnsense:17.1.10
Opnsense » Opnsense » Version: 17.1.11

cpe:2.3:a:opnsense:opnsense:17.1.11
Opnsense » Opnsense » Version: 17.1.2

cpe:2.3:a:opnsense:opnsense:17.1.2
Opnsense » Opnsense » Version: 17.1.3

cpe:2.3:a:opnsense:opnsense:17.1.3
Opnsense » Opnsense » Version: 17.1.4

cpe:2.3:a:opnsense:opnsense:17.1.4
Opnsense » Opnsense » Version: 17.1.5

cpe:2.3:a:opnsense:opnsense:17.1.5
Opnsense » Opnsense » Version: 17.1.6

cpe:2.3:a:opnsense:opnsense:17.1.6
Opnsense » Opnsense » Version: 17.1.7

cpe:2.3:a:opnsense:opnsense:17.1.7
Opnsense » Opnsense » Version: 17.1.8

cpe:2.3:a:opnsense:opnsense:17.1.8
Opnsense » Opnsense » Version: 17.1.9

cpe:2.3:a:opnsense:opnsense:17.1.9
Opnsense » Opnsense » Version: 17.7

cpe:2.3:a:opnsense:opnsense:17.7
Opnsense » Opnsense » Version: 17.7.1

cpe:2.3:a:opnsense:opnsense:17.7.1
Opnsense » Opnsense » Version: 17.7.10

cpe:2.3:a:opnsense:opnsense:17.7.10
Opnsense » Opnsense » Version: 17.7.11

cpe:2.3:a:opnsense:opnsense:17.7.11
Opnsense » Opnsense » Version: 17.7.12

cpe:2.3:a:opnsense:opnsense:17.7.12
Opnsense » Opnsense » Version: 17.7.2

cpe:2.3:a:opnsense:opnsense:17.7.2
Opnsense » Opnsense » Version: 17.7.3

cpe:2.3:a:opnsense:opnsense:17.7.3
Opnsense » Opnsense » Version: 17.7.4

cpe:2.3:a:opnsense:opnsense:17.7.4
Opnsense » Opnsense » Version: 17.7.5

cpe:2.3:a:opnsense:opnsense:17.7.5
Opnsense » Opnsense » Version: 17.7.6

cpe:2.3:a:opnsense:opnsense:17.7.6
Opnsense » Opnsense » Version: 17.7.7

cpe:2.3:a:opnsense:opnsense:17.7.7
Opnsense » Opnsense » Version: 17.7.8

cpe:2.3:a:opnsense:opnsense:17.7.8
Opnsense » Opnsense » Version: 17.7.9

cpe:2.3:a:opnsense:opnsense:17.7.9
Opnsense » Opnsense » Version: 18.1

cpe:2.3:a:opnsense:opnsense:18.1
Opnsense » Opnsense » Version: 18.1.1

cpe:2.3:a:opnsense:opnsense:18.1.1
Opnsense » Opnsense » Version: 18.1.10

cpe:2.3:a:opnsense:opnsense:18.1.10
Opnsense » Opnsense » Version: 18.1.11

cpe:2.3:a:opnsense:opnsense:18.1.11
Opnsense » Opnsense » Version: 18.1.12

cpe:2.3:a:opnsense:opnsense:18.1.12
Opnsense » Opnsense » Version: 18.1.13

cpe:2.3:a:opnsense:opnsense:18.1.13
Opnsense » Opnsense » Version: 18.1.2

cpe:2.3:a:opnsense:opnsense:18.1.2
Opnsense » Opnsense » Version: 18.1.3

cpe:2.3:a:opnsense:opnsense:18.1.3
Opnsense » Opnsense » Version: 18.1.4

cpe:2.3:a:opnsense:opnsense:18.1.4
Opnsense » Opnsense » Version: 18.1.5

cpe:2.3:a:opnsense:opnsense:18.1.5
Opnsense » Opnsense » Version: 18.1.6

cpe:2.3:a:opnsense:opnsense:18.1.6
Opnsense » Opnsense » Version: 18.1.7

cpe:2.3:a:opnsense:opnsense:18.1.7
Opnsense » Opnsense » Version: 18.1.8

cpe:2.3:a:opnsense:opnsense:18.1.8
Opnsense » Opnsense » Version: 18.1.9

cpe:2.3:a:opnsense:opnsense:18.1.9
Opnsense » Opnsense » Version: 18.1rc1

cpe:2.3:a:opnsense:opnsense:18.1rc1
Opnsense » Opnsense » Version: 18.1rc2

cpe:2.3:a:opnsense:opnsense:18.1rc2
Opnsense » Opnsense » Version: 18.7

cpe:2.3:a:opnsense:opnsense:18.7
Opnsense » Opnsense » Version: 18.7.0

cpe:2.3:a:opnsense:opnsense:18.7.0
Opnsense » Opnsense » Version: 18.7.1

cpe:2.3:a:opnsense:opnsense:18.7.1
Opnsense » Opnsense » Version: 18.7.10

cpe:2.3:a:opnsense:opnsense:18.7.10
Opnsense » Opnsense » Version: 18.7.2

cpe:2.3:a:opnsense:opnsense:18.7.2
Opnsense » Opnsense » Version: 18.7.3

cpe:2.3:a:opnsense:opnsense:18.7.3
Opnsense » Opnsense » Version: 18.7.4

cpe:2.3:a:opnsense:opnsense:18.7.4
Opnsense » Opnsense » Version: 18.7.5

cpe:2.3:a:opnsense:opnsense:18.7.5
Opnsense » Opnsense » Version: 18.7.6

cpe:2.3:a:opnsense:opnsense:18.7.6
Opnsense » Opnsense » Version: 18.7.7

cpe:2.3:a:opnsense:opnsense:18.7.7
Opnsense » Opnsense » Version: 18.7.8

cpe:2.3:a:opnsense:opnsense:18.7.8
Opnsense » Opnsense » Version: 18.7.9

cpe:2.3:a:opnsense:opnsense:18.7.9
Opnsense » Opnsense » Version: 19.1

cpe:2.3:a:opnsense:opnsense:19.1
Opnsense » Opnsense » Version: 19.1.1

cpe:2.3:a:opnsense:opnsense:19.1.1
Opnsense » Opnsense » Version: 19.1.10

cpe:2.3:a:opnsense:opnsense:19.1.10
Opnsense » Opnsense » Version: 19.1.2

cpe:2.3:a:opnsense:opnsense:19.1.2
Opnsense » Opnsense » Version: 19.1.3

cpe:2.3:a:opnsense:opnsense:19.1.3
Opnsense » Opnsense » Version: 19.1.4

cpe:2.3:a:opnsense:opnsense:19.1.4
Opnsense » Opnsense » Version: 19.1.5

cpe:2.3:a:opnsense:opnsense:19.1.5
Opnsense » Opnsense » Version: 19.1.6

cpe:2.3:a:opnsense:opnsense:19.1.6
Opnsense » Opnsense » Version: 19.1.7

cpe:2.3:a:opnsense:opnsense:19.1.7
Opnsense » Opnsense » Version: 19.1.8

cpe:2.3:a:opnsense:opnsense:19.1.8
Opnsense » Opnsense » Version: 19.1.9

cpe:2.3:a:opnsense:opnsense:19.1.9
Opnsense » Opnsense » Version: 19.7

cpe:2.3:a:opnsense:opnsense:19.7
Opnsense » Opnsense » Version: 19.7.1

cpe:2.3:a:opnsense:opnsense:19.7.1
Opnsense » Opnsense » Version: 19.7.10

cpe:2.3:a:opnsense:opnsense:19.7.10
Opnsense » Opnsense » Version: 19.7.2

cpe:2.3:a:opnsense:opnsense:19.7.2
Opnsense » Opnsense » Version: 19.7.3

cpe:2.3:a:opnsense:opnsense:19.7.3
Opnsense » Opnsense » Version: 19.7.4

cpe:2.3:a:opnsense:opnsense:19.7.4
Opnsense » Opnsense » Version: 19.7.5

cpe:2.3:a:opnsense:opnsense:19.7.5
Opnsense » Opnsense » Version: 19.7.6

cpe:2.3:a:opnsense:opnsense:19.7.6
Opnsense » Opnsense » Version: 19.7.7

cpe:2.3:a:opnsense:opnsense:19.7.7
Opnsense » Opnsense » Version: 19.7.8

cpe:2.3:a:opnsense:opnsense:19.7.8
Opnsense » Opnsense » Version: 19.7.9

cpe:2.3:a:opnsense:opnsense:19.7.9
Opnsense » Opnsense » Version: 20.1

cpe:2.3:a:opnsense:opnsense:20.1
Opnsense » Opnsense » Version: 20.1.1

cpe:2.3:a:opnsense:opnsense:20.1.1
Opnsense » Opnsense » Version: 20.1.2

cpe:2.3:a:opnsense:opnsense:20.1.2
Opnsense » Opnsense » Version: 20.1.3

cpe:2.3:a:opnsense:opnsense:20.1.3
Opnsense » Opnsense » Version: 20.1.4

cpe:2.3:a:opnsense:opnsense:20.1.4
Opnsense » Opnsense » Version: 20.1.5

cpe:2.3:a:opnsense:opnsense:20.1.5
Opnsense » Opnsense » Version: 20.1.6

cpe:2.3:a:opnsense:opnsense:20.1.6
Opnsense » Opnsense » Version: 20.1.7

cpe:2.3:a:opnsense:opnsense:20.1.7
Opnsense » Opnsense » Version: 20.1.8

cpe:2.3:a:opnsense:opnsense:20.1.8
Opnsense » Opnsense » Version: 20.1.9

cpe:2.3:a:opnsense:opnsense:20.1.9
Opnsense » Opnsense » Version: 20.7

cpe:2.3:a:opnsense:opnsense:20.7
Opnsense » Opnsense » Version: 20.7.1

cpe:2.3:a:opnsense:opnsense:20.7.1
Opnsense » Opnsense » Version: 20.7.2

cpe:2.3:a:opnsense:opnsense:20.7.2
Opnsense » Opnsense » Version: 20.7.3

cpe:2.3:a:opnsense:opnsense:20.7.3
Opnsense » Opnsense » Version: 20.7.4

cpe:2.3:a:opnsense:opnsense:20.7.4
Opnsense » Opnsense » Version: 20.7.5

cpe:2.3:a:opnsense:opnsense:20.7.5
Opnsense » Opnsense » Version: 20.7.6

cpe:2.3:a:opnsense:opnsense:20.7.6
Opnsense » Opnsense » Version: 20.7.7

cpe:2.3:a:opnsense:opnsense:20.7.7
Opnsense » Opnsense » Version: 20.7.8

cpe:2.3:a:opnsense:opnsense:20.7.8
Opnsense » Opnsense » Version: 21.1

cpe:2.3:a:opnsense:opnsense:21.1
Opnsense » Opnsense » Version: 21.1.1

cpe:2.3:a:opnsense:opnsense:21.1.1
Opnsense » Opnsense » Version: 21.1.2

cpe:2.3:a:opnsense:opnsense:21.1.2
Opnsense » Opnsense » Version: 21.1.3

cpe:2.3:a:opnsense:opnsense:21.1.3
Opnsense » Opnsense » Version: 21.1.4

cpe:2.3:a:opnsense:opnsense:21.1.4
Opnsense » Opnsense » Version: 21.1.5

cpe:2.3:a:opnsense:opnsense:21.1.5
Opnsense » Opnsense » Version: 21.4

cpe:2.3:a:opnsense:opnsense:21.4
Opnsense » Opnsense » Version: 23.1

cpe:2.3:a:opnsense:opnsense:23.1
Opnsense » Opnsense » Version: 8.1.13

cpe:2.3:a:opnsense:opnsense:8.1.13

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-38997

Products

Pricing

Contact Us