Beveiligingsadvies

CVE-2023-31474

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-05-09 00:00:00

Laatst bijgewerkt 2025-01-29 20:26:33

Toegewezen door mitre

CVSS-score 7.5

Status PUBLISHED

Beschrijving

An issue was discovered on GL.iNet devices before 3.216. Through the software installation feature, it is possible to inject arbitrary parameters in a request to cause opkg to obtain a list of files in a specific directory, by using the regex feature in a package name.

← Alle CVE's bekijken Bekijk op cve.org ↗