CVE-2023-50919

2024-01-1200:00:00

mitre

www.cve.org

gl.inet

nginx

authentication bypass

lua

string pattern

a1300

ax1800

axt1800

mt3000

mt2500

mt6000

mt1300

mt300n-v2

ar750s

ar750

ar300m

b1300

AI Score

Confidence

High

EPSS

0.001

Percentile

43.4%

JSON

An issue was discovered on GL.iNet devices before version 4.5.0. There is an NGINX authentication bypass via Lua string pattern matching. This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000 4.4.6, MT2500 4.4.6, MT6000 4.5.0, MT1300 4.3.7, MT300N-V2 4.3.7, AR750S 4.3.7, AR750 4.3.7, AR300M 4.3.7, and B1300 4.3.7.