CVE-2024-57514

CVE-2024-57514...

CVE-2024-57514

The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting XSS due to improper handling of directory listing paths in the web interface. When a specially crafted URL is visited, the router's web page renders the directory listing and executes arbitrary JavaScript embedded in the URL...

CVE-2024-57514

creationtimestamp| type| source ---|---|--- 2025-01-28 21:55:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113908207774846911 2025-01-28 22:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgti6ewau42e 2025-01-28 23:17:59+00:00|...

CVE-2024-57514

The CVE-2024-57514 entry concerns the TP-Link Archer A20 v3 router. Affected component is the web interface’s directory listing handling, where improper processing of listing paths enables Cross-site Scripting (XSS) when a crafted URL is visited. This allows injection of arbitrary JavaScript that...

CVE-2024-57514

The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting XSS due to improper handling of directory listing paths in the web interface. When a specially crafted URL is visited, the router's web page renders the directory listing and executes arbitrary JavaScript embedded in the URL...