Openwebif Project Openwebif
4 CVEs affecting Openwebif Project Openwebif. Latest disclosed: 2021-08-04. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-9807 | Critical | 9.8 | 2017-06-22 | An issue was discovered in the OpenWebif plugin through 1.2.4 for E2 open devices. The saveConfig function of "plugin/controllers/models/config.py" performs an… |
CVE-2017-9333 | High | 8.8 | 2017-09-18 | OpenWebif 1.2.5 allows remote code execution via a URL to the CallOPKG function in the IpkgController class in plugin/controllers/ipkg.py, when the URL refers… |
CVE-2018-20332 | High | 7.5 | 2018-12-21 | An issue has been discovered in the OpenWebif plugin through 1.2.4 for Enigma2 based devices. Reading of arbitrary files is possible with /file?action=download… |
CVE-2021-38113 | Medium | 5.4 | 2021-08-04 | In addBouquet in js/bqe.js in OpenWebif (aka e2openplugin-OpenWebif) through 1.4.7, inserting JavaScript into the Add Bouquet feature of the Bouquet Editor (i… |