The Web Interface for OpenWRT LuCI version 19.07 and lower has been discovered to have a cross-site scripting vulnerability which can lead to attackers carrying out arbitrary code execution.
References
Link | Resource |
---|---|
http://openwrt.com | Vendor Advisory |
http://openwrtorg.com | Broken Link |
Configurations
Information
Published : 2021-05-25 07:15
Updated : 2021-06-03 08:26
NVD link : CVE-2021-27821
Mitre link : CVE-2021-27821
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
openwrt
- luci