CVE-2019-17367

creationtimestamp| type| source ---|---|--- 2024-01-17 09:41:50+00:00| seen| https://t.me/ctinow/169177...

Security Advisory 2019-11-05-2 - LuCI CSRF vulnerability (CVE-2019-17367)

DESCRIPTION A logic flaw in LuCI's HTTP routing component led to ineffective CSRF token testing for various request endpoints, specifically ones using the arcombine dispatch action. This allows 3rd party web pages running in the same browser session as an active LuCI login session to perform...

CVE-2019-17367

CVE-2019-17367 is a CSRF vulnerability in OpenWrt LuCI affecting OpenWrt 18.06.0–18.06.4. A logic flaw in LuCI’s HTTP routing led to ineffective CSRF token testing for endpoints (including arcombine()-based dispatch) under /cgi-bin/luci/admin/network/. This permits a malicious site to cause unint...