CVE-2019-18993
on github
Published
Severity
CVSS v3:
5.4 MEDIUM
CVSS v2:
3.5 LOW
Description
OpenWrt 18.06.4 allows XSS via the "New port forward" Name field to the cgi-bin/luci/admin/network/firewall/forwards URI (this can occur, for example, on a TP-Link Archer C7 device).
References
Configurations
CPE23 | Version Start | Version End | Exact Version |
---|---|---|---|
cpe:2.3:a:openwrt:openwrt:18.06.4:*:*:*:*:*:*:* | n/a | n/a | 18.06.4 |
cpe:2.3:o:openwrt:openwrt:18.06.4:*:*:*:*:*:*:* | n/a | n/a | 18.06.4 |