medium6.1
CVE-2021-32019
There is missing input validation of host names displayed in OpenWrt before 19.07.8.
Impact
There is missing input validation of host names displayed in OpenWrt before 19.07.8. The Connection Status page of the luci web-interface allows XSS, which can be used to gain full control over the affected system via ICMP.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openwrt | Openwrt | from 19.07.0 before 19.07.8 |