CVE
CVE-2018-19630
cgi_handle_request in uhttpd in OpenWrt through 18.06.1 and LEDE through 17.01 has unauthenticated reflected XSS via the URI, as demonstrated by a cgi-bin/?[XSS] URI.
- Severity
- MEDIUM
- CVSS
- 6.1
- Published
- Modified
Linked Releases
| Distribution | Release | Status | Evidence |
|---|---|---|---|
| OpenWrt | 25.12.4 x86_64 target x86-64 | unknown | source |
| OpenWrt | 25.12.4 x86 target x86-generic | unknown | source |
| OpenWrt | 25.12.4 x86 target x86-geode | unknown | source |
| OpenWrt | 25.12.4 x86 target x86-legacy | unknown | source |
| OpenWrt | 25.12.5 x86_64 target x86-64 | unknown | source |
| OpenWrt | 25.12.5 x86 target x86-generic | unknown | source |
| OpenWrt | 25.12.5 x86 target x86-geode | unknown | source |
| OpenWrt | 25.12.5 x86 target x86-legacy | unknown | source |