A stored cross-site scripting (XSS) vulnerability in the urlFilterList function of Asus RT-N10LX Router v2.0.0.39 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL Keyword List text field. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
References
Link | Resource |
---|---|
https://github.com/OlivierLaflamme/cve/blob/main/ASUS-N10LX_2.0.0.39/StoredXSS_FirewallURLFilter.md | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
07 Nov 2023, 04:15
Type | Values Removed | Values Added |
---|---|---|
Summary | A stored cross-site scripting (XSS) vulnerability in the urlFilterList function of Asus RT-N10LX Router v2.0.0.39 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL Keyword List text field. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. |
21 Jun 2023, 14:30
Type | Values Removed | Values Added |
---|---|---|
First Time |
Asus
Asus rt-n10lx Firmware Asus rt-n10lx |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
CPE | cpe:2.3:h:asus:rt-n10lx:-:*:*:*:*:*:*:* cpe:2.3:o:asus:rt-n10lx_firmware:2.0.0.39:*:*:*:*:*:*:* |
|
CWE | CWE-79 | |
References | (MISC) https://github.com/OlivierLaflamme/cve/blob/main/ASUS-N10LX_2.0.0.39/StoredXSS_FirewallURLFilter.md - Exploit, Third Party Advisory |
12 Jun 2023, 20:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-06-12 20:15
Updated : 2024-08-02 17:15
NVD link : CVE-2023-34941
Mitre link : CVE-2023-34941
CVE.ORG link : CVE-2023-34941
JSON object : View
Products Affected
asus
- rt-n10lx_firmware
- rt-n10lx
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')