CVE-2020-19204

State: Published
Severity: Not scored
Published: Jul 12, 2021
Updated: Aug 4, 2024
Reserved: Aug 13, 2020

Description

An authenticated Stored Cross-Site Scriptiong (XSS) vulnerability exists in Lightning Wire Labs IPFire 2.21 (x86_64) - Core Update 130 in the "routing.cgi" Routing Table Entries via the "Remark" text box or "remark" parameter. It allows an authenticated WebGUI user to execute Stored Cross-site Scripting in the Routing Table Entries.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://www.lightningwirelabs.com/
https://blog.ipfire.org/post/ipfire-2-23-core-update-133-has-been-released
https://gist.github.com/dharmeshbaskaran/1fdc069c0ad729d12bf3304b5f19b02d

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.