Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-20137

Опубликовано: 09 дек. 2021
Источник: nvd
CVSS3: 6.1
CVSS2: 4.3
EPSS Средний

Описание

A reflected cross-site scripting vulnerability exists in the url parameter of the /cgi-bin/luci/site_access/ page on the Gryphon Tower router's web interface. An attacker could exploit this issue by tricking a user into following a specially crafted link, granting the attacker javascript execution in the context of the victim's browser.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:gryphonconnect:gryphon_tower_firmware:*:*:*:*:*:*:*:*
Версия до 04.0004.12 (включая)
cpe:2.3:h:gryphonconnect:gryphon_tower:-:*:*:*:*:*:*:*

EPSS

Процентиль: 93%
0.11461
Средний

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

github логотип

GHSA-3m6f-2h66-fxv5

github
около 4 лет назад

A reflected cross-site scripting vulnerability exists in the url parameter of the /cgi-bin/luci/site_access/ page on the Gryphon Tower router's web interface. An attacker could exploit this issue by tricking a user into following a specially crafted link, granting the attacker javascript execution in the context of the victim's browser.

EPSS

Процентиль: 93%
0.11461
Средний

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79