LuCI NAT Rules Name Screen XSS

The vulnerability of the NAT Rules Name Screen web interface of the LuCI configuration interface in the embedded OpenWrt operating system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a remote attacker to perform cross-site...

PT-2021-6849 · Openwrt · Openwrt

Name of the Vulnerable Software and Affected Versions: OpenWrt version 21.02.1 Description: The issue exists due to inadequate protection of the web page structure in the OpenWrt embedded operating system. This allows for a potential Cross-Site Scripting XSS attack via the Traffic Rules Name...

OpenWrt: Cross-site scripting vulnerabilities

OpenWrt, a Linux operating system for embedded devices, is vulnerable to a cross-site scripting vulnerability in OpenWrt version 21.02.1, which stems from the lack of effective filtering and escaping of user-submitted parameters in the Traffic Rules Name screen. No detailed vulnerability details...