Skip to content
OpenAdvisories

Product · openwrt

luci-app-banip

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5

    luci-app-banip Log Monitor IP Extraction Bypass

    luci-app-banip contains a log parsing vulnerability where the awk-based parser extracts the first IPv4 address from log lines regardless of field position, allowing attackers to inject arbitrary IPs via attacker-controlled fields like usernames. An unauthenti…