description: In IgniteNet HeliOS GLinq v2.2.1 r2961, the langSelection parameter is stored in the luci configuration file (/etc/config/luci) by the authenticator.htmlauth function. When modified with arbitrary javascript, this causes a denial-of-service condition for all other users.
problem types: Denial of Service
affected:
{
product: IgniteNet HeliOS GLinq
vendor: n/a
versions:
status: affected, version: v2.2.1 r2961
}