CVE-2024-2188 PoC — TP-LINK AX50 跨站脚本漏洞

Source

Associated Vulnerability

Description

Exploit for stored XSS vulnerability found in the TP-Link Archer AX50 router.

Readme

# CVE-2024-2188

CVE-2024-2188 is a Stored XSS vulnerability in the TP-Link Archer AX50 router, affecting firmware version 1.0.11 build 2022052.
It occurs in the UPnP service, where command `AddPortMapping` allows attackers to create a new `PortMapping` entry without sanitizing user input for the `description` field.
This allows the attacker to inject HTML entities with malicious JavaScript that will be executed when visiting the tha UPnP tab in the NAT Forwarding admin page (`Advanced > NAT Forwarding > UPnP`).
If an authenticated user triggers the XSS, it allows an unatuthenticated attacker to perform actions as that authenticated user, potentially allowing further compromise of the device

File Snapshot

 [4.0K]  /data/pocs/4380785eafef3ea001ea7bf99f5c617bd9ff30aa
├── [1.9K]  PoC.py
└── [ 701]  README.md

0 directories, 2 files

Remarks