Security Advisory
CVE-2023-31474
7.5
HIGH
Vulnerability Description
An issue was discovered on GL.iNet devices before 3.216. Through the software installation feature, it is possible to inject arbitrary parameters in a request to cause opkg to obtain a list of files in a specific directory, by using the regex feature in a package name.
Published Date
May 9, 2023
Official Source
NIST NVD Advisory