Skip to content
Sign in
Not rated

CVE-2020-5781 In IgniteNet HeliOS GLinq v2.2.1 r2961, the langSelection parameter is stored in the luci configuration file…

Description

In IgniteNet HeliOS GLinq v2.2.1 r2961, the langSelection parameter is stored in the luci configuration file (/etc/config/luci) by the authenticator.htmlauth function. When modified with arbitrary javascript, this causes a denial-of-service condition for all other users.

Affected products and versions

Product Affected versions Fixed in
IgniteNet HeliOS GLinq Versions not published

Other CVEs of IgniteNet HeliOS GLinq

The 3 CVEs of IgniteNet HeliOS GLinq →
CVE-2020-5782 In IgniteNet HeliOS GLinq v2.2.1 r2961, if a user logs in and sets the ‘wan_type’ parameter, the wan interface for the… Not rated CVE-2020-5783 In IgniteNet HeliOS GLinq v2.2.1 r2961, the login functionality does not contain any CSRF protection mechanisms Not rated
Track this CVE