CVE-2020-11782
published 2020-04-15CVE-2020-11782: Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28…
PriorityP418medium4.8CVSS 3.1
AVNACLPRHUIRSCCLILAN
EPSS
0.48%
38.8th percentile
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, XR500 before 2.3.2.56, and XR700 before 1.0.1.10.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | subversion | >= 0 < 1.9.7-4ubuntu1.1 | 1.9.7-4ubuntu1.1 |
| apache | subversion | >= 0 < 1.13.0-3ubuntu0.2 | 1.13.0-3ubuntu0.2 |
| netgear | d7800_firmware | < 1.0.1.56 | 1.0.1.56 |
| netgear | r7500_firmware | < 1.0.3.46 | 1.0.3.46 |
| netgear | r7800_firmware | < 1.0.2.68 | 1.0.2.68 |
| netgear | r8900_firmware | < 1.0.4.28 | 1.0.4.28 |
| netgear | r9000_firmware | < 1.0.4.28 | 1.0.4.28 |
| netgear | rax120_firmware | < 1.0.0.78 | 1.0.0.78 |
| netgear | xr500_firmware | < 2.3.2.56 | 2.3.2.56 |
| netgear | xr700_firmware | < 1.0.1.10 | 1.0.1.10 |
CVSS provenance
nvdv3.14.8MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
nvdv3.06.0MEDIUMCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
nvdv2.03.5LOWAV:N/AC:M/Au:S/C:N/I:P/A:N
osv6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
subversion vulnerabilities
osv·2022-05-26·CVSS 6.5
CVE-2018-11782 subversion vulnerabilities
subversion vulnerabilities
Ace Olszowka discovered that Subversion incorrectly handled certain
svnserve requests. A remote attacker could possibly use this issue to cause
svnserver to crash, resulting in a denial of service. This issue only
affected Ubuntu 18.04 LTS. (CVE-2018-11782)
Tomas Bortoli discovered that Subversion incorrectly handled certain
svnserve requests. A remote attacker could possibly use this issue to cause
svnserver to crash, resulting in a denial of service. This issue only
affected Ubuntu 18.04 LTS. (CVE-2019-0203)
Thomas Åkesson discovered that Subversion incorrectly handled certain
inputs. An attacker could possibly use this issue to cause a denial of
service. (CVE-2020-17525)
GHSA
GHSA-m25f-46xv-8r9w: Certain NETGEAR devices are affected by stored XSS
ghsa_unreviewed·2022-05-24
CVE-2020-11782 [LOW] GHSA-m25f-46xv-8r9w: Certain NETGEAR devices are affected by stored XSS
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, XR500 before 2.3.2.56, and XR700 before 1.0.1.10.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-04-15
Published