D-Link DIR-866L 1.03B04 devices allow XSS via HtmlResponseMessage in the device common gateway interface, leading to common injection.
References
Link | Resource |
---|---|
https://fortiguard.com/zeroday/FG-VD-19-116 | Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2019-10-16 11:15
Updated : 2021-04-22 13:47
NVD link : CVE-2019-17663
Mitre link : CVE-2019-17663
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
d-link
- dir-866l_firmware
- dir-866l