CVE-2020-5783 In IgniteNet HeliOS GLinq v2.2.1 r2961, the login functionality does not contain any CSRF protection mechanisms

Description

In IgniteNet HeliOS GLinq v2.2.1 r2961, the login functionality does not contain any CSRF protection mechanisms.

Affected products and versions

Product	Affected versions	Fixed in
IgniteNet HeliOS GLinq	Versions not published

Other CVEs of IgniteNet HeliOS GLinq

The 3 CVEs of IgniteNet HeliOS GLinq →

CVE-2020-5781 In IgniteNet HeliOS GLinq v2.2.1 r2961, the langSelection parameter is stored in the luci configuration file… Not rated CVE-2020-5782 In IgniteNet HeliOS GLinq v2.2.1 r2961, if a user logs in and sets the ‘wan_type’ parameter, the wan interface for the… Not rated