Open Redirect Vulnerability in Stormshield Network Security Devices

CVE-2020-8430

What is CVE-2020-8430?

Stormshield Network Security 310 devices are susceptible to an Open Redirect vulnerability affecting the captive portal. This vulnerability allows attackers to manipulate the 'rurl' parameter in a malicious query string, enabling redirection to untrusted sites. For example, an attacker can use 'rurl=//example.com' instead of the intended 'rurl=https://example.com', potentially leading users to phishing sites or other harmful endpoints. Users of the affected versions should apply necessary updates and safeguards to mitigate these risks.

References