Описание
In IgniteNet HeliOS GLinq v2.2.1 r2961, the langSelection parameter is stored in the luci configuration file (/etc/config/luci) by the authenticator.htmlauth function. When modified with arbitrary javascript, this causes a denial-of-service condition for all other users.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:ignitenet:helios_glinq:2.2.1:r2961:*:*:*:*:*:*
EPSS
Процентиль: 53%
0.00299
Низкий
4.3 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-79
Связанные уязвимости
github
больше 3 лет назад
In IgniteNet HeliOS GLinq v2.2.1 r2961, the langSelection parameter is stored in the luci configuration file (/etc/config/luci) by the authenticator.htmlauth function. When modified with arbitrary javascript, this causes a denial-of-service condition for all other users.
EPSS
Процентиль: 53%
0.00299
Низкий
4.3 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-79