Aller au contenu
Se connecter
Non notée

CVE-2020-5781 In IgniteNet HeliOS GLinq v2.2.1 r2961, the langSelection parameter is stored in the luci configuration file…

Description

In IgniteNet HeliOS GLinq v2.2.1 r2961, the langSelection parameter is stored in the luci configuration file (/etc/config/luci) by the authenticator.htmlauth function. When modified with arbitrary javascript, this causes a denial-of-service condition for all other users.

Produits et versions touchés

Produit Versions touchées Corrigé en
IgniteNet HeliOS GLinq Versions non publiées

Autres CVE de IgniteNet HeliOS GLinq

Les 3 CVE de IgniteNet HeliOS GLinq →
CVE-2020-5782 In IgniteNet HeliOS GLinq v2.2.1 r2961, if a user logs in and sets the ‘wan_type’ parameter, the wan interface for the… Non notée CVE-2020-5783 In IgniteNet HeliOS GLinq v2.2.1 r2961, the login functionality does not contain any CSRF protection mechanisms Non notée
Suivre cette CVE