In IgniteNet HeliOS GLinq v2.2.1 r2961, the langSelection parameter is stored in the luci configuration file (/etc/config/luci) by the authenticator.htmlauth function. When modified with arbitrary javascript, this causes a denial-of-service condition for all other users.
[
{
"product": "IgniteNet HeliOS GLinq",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "v2.2.1 r2961"
}
]
}
]