Skip to content
OpenAdvisories
Unscored CVE-2020-5781 EUVD-2020-26938GHSA-r536-4rjh-7q6r

In IgniteNet HeliOS GLinq v2.2.1 r2961, the langSelection parameter is stored in the luci configuration file (/etc/config/luci) by the auth…

Published Sep 23, 2020 · Updated Aug 4, 2024 · Assigned by tenable

Description

In IgniteNet HeliOS GLinq v2.2.1 r2961, the langSelection parameter is stored in the luci configuration file (/etc/config/luci) by the authenticator.htmlauth function. When modified with arbitrary javascript, this causes a denial-of-service condition for all other users.

Affected products

VendorProductAffectedFixed
— IgniteNet HeliOS GLinq v2.2.1 r2961 —

References