Open Redirect Vulnerabilities in Suricata for pfSense

CVE-2014-4696

What is CVE-2014-4696?

Suricata, a network threat detection engine integrated with pfSense, is prone to multiple open redirect vulnerabilities that could permit remote attackers to redirect users to malicious websites. Exploiting this flaw can enable attackers to conduct phishing attacks effectively. The vulnerabilities are present in Suricata versions prior to 1.0.6 for pfSense versions below 2.1.4, specifically through manipulation of the referer parameter in suricata_rules_flowbits.php and the returl parameter in suricata_select_alias.php.

References