CVE:CVE-2020-25786
CNNVD:CNNVD-202009-1261
D-Link DIR-816L和DIR-816都是中国台湾友讯（D-Link）公司的一款无线路由器。
D-Link DIR-816L 2.06.B09_BETA 和 DIR-803 1.04.B02 设备存在跨站脚本漏洞，该漏洞源于允许通过HTTP引用头进行跨站访问，而且web页面不能指定客户端应该使用任意的Referer头发出额外的HTTP请求。
solution:Upgrade dlink dir-803_firmware to a higher version than 1.04.b02,and avoid the version 1.04.b02; Upgrade dlink dir-816l_firmware to a higher version than 2.06,2.06.b09:beta,and avoid the version 2.06,2.06.b09:beta; Upgrade dlink dir-645_firmware to a higher version than 1.06b01,and avoid the version 1.06b01; Upgrade dlink dir-815_firmware to a higher version than 2.07.b01,and avoid the version 2.07.b01; Upgrade dlink dir-860l_firmware to a higher version than 1.10b04,and avoid the version 1.10b04; Upgrade dlink dir-865l_firmware to a higher version than 1.08b01,and avoid the version 1.08b01