CVE-2024-57514

CVE-2024-57514...

CVE-2024-57514

The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting XSS due to improper handling of directory listing paths in the web interface. When a specially crafted URL is visited, the router's web page renders the directory listing and executes arbitrary JavaScript embedded in the URL...

CVE-2024-57514

creationtimestamp| type| source ---|---|--- 2025-01-28 21:55:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113908207774846911 2025-01-28 22:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgti6ewau42e 2025-01-28 23:17:59+00:00|...

CVE-2024-57514

The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting XSS due to improper handling of directory listing paths in the web interface. When a specially crafted URL is visited, the router's web page renders the directory listing and executes arbitrary JavaScript embedded in the URL...

CVE-2024-57514

The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting (XSS) in its web interface (specifically version 1.0.6 Build 20231011 rel.85717(5553) ) due to improper handling of directory listing paths. An attacker can provide a specially crafted URL that causes the router's web page to ...