CVE-2021-20137
Expert Analysis
Professional remediation guidance
Get tailored security recommendations from our analyst team for CVE-2021-20137. We'll provide specific mitigation strategies based on your environment and risk profile.
Description
A reflected cross-site scripting vulnerability exists in the url parameter of the /cgi-bin/luci/site_access/ page on the Gryphon Tower router's web interface. An attacker could exploit this issue by tricking a user into following a specially crafted link, granting the attacker javascript execution in the context of the victim's browser.
Available Exploits
Gryphon Tower - Cross-Site Scripting
Gryphon Tower router web interface contains a reflected cross-site scripting vulnerability in the url parameter of the /cgi-bin/luci/site_access/ page. An attacker can exploit this issue by tricking a user into following a specially crafted link, granting the attacker JavaScript execution in the victim's browser.
Related News
GitHub Security Advisories
Community-driven vulnerability intelligence from GitHub
Advisory Details
CVSS Scoring
CVSS Score
References
Advisory provided by GitHub Security Advisory Database. Published: December 10, 2021, Modified: December 14, 2021