CVE-2019-18992
on github
Published
Severity
CVSS v3:
5.4 MEDIUM
CVSS v2:
3.5 LOW
Description
OpenWrt 18.06.4 allows XSS via these Name fields to the cgi-bin/luci/admin/network/firewall/rules URI: "Open ports on router" and "New forward rule" and "New Source NAT" (this can occur, for example, on a TP-Link Archer C7 device).
References
Configurations
| CPE23 | Version Start | Version End | Exact Version |
|---|---|---|---|
| cpe:2.3:a:openwrt:openwrt:18.06.4:*:*:*:*:*:*:* | n/a | n/a | 18.06.4 |
| cpe:2.3:o:openwrt:openwrt:18.06.4:*:*:*:*:*:*:* | n/a | n/a | 18.06.4 |