The Crash Reporter (crash_reporter.php) component of OPNsense Community Edition prior to 23.7 and Business Edition prior to 23.4.2 mishandles input sanitization.
opnsense opnsense