CVE-2020-23617 — Cross-site Scripting in N100re Firmware

CWE-79 — Cross-site Scripting3 documents3 sources
Severity
6.1MEDIUMNVD
EPSS
0.2%
top 56.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Totolink N100re FirmwareTotolink N200re Firmware
Timeline
PublishedMay 2
Latest updateMay 4

Description

A cross site scripting (XSS) vulnerability in the error page of Totolink N200RE and N100RE Routers 2.0 allows attackers to execute arbitrary web scripts or HTML via SCRIPT element.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-652g-xm3x-m224: A cross site scripting (XSS) vulnerability in the error page of Totolink N200RE and N100RE Routers 2↗2022-05-04
▶
CVEList
CVE-2020-23617: A cross site scripting (XSS) vulnerability in the error page of Totolink N200RE and N100RE Routers 2↗2022-05-02
▶
CVE-2020-23617 — Cross-site Scripting | cvebase