CVE-2020-5781

MEDIUM 4.3CVE-2020-5781 · Published 23/09/2020 · updated 17/06/2026

In short

CVE-2020-5781 is a MEDIUM (CVSS 4.3) vulnerability affecting helios glinq (ignitenet).
Chance of exploitation in the next 30 days (EPSS): 0.90%, higher than 59.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
helios glinq ignitenet	`= 2.2.1`	No fix yet

Description

In IgniteNet HeliOS GLinq v2.2.1 r2961, the langSelection parameter is stored in the luci configuration file (/etc/config/luci) by the authenticator.htmlauth function. When modified with arbitrary javascript, this causes a denial-of-service condition for all other users.

References

tenable.com/security/research/tra-2020-55 · Exploit

More vulnerabilities in helios glinq

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free