Security Advisory

CVE-2023-31474

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-05-09 00:00:00

Last updated 2025-01-29 20:26:33

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered on GL.iNet devices before 3.216. Through the software installation feature, it is possible to inject arbitrary parameters in a request to cause opkg to obtain a list of files in a specific directory, by using the regex feature in a package name.

← Browse all CVEs View on cve.org ↗