deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-39358
Published: 2025-01-14
Description: A buffer overflow vulnerability exists in the adm.cgi set_wzap() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2027; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2027
CVE: CVE-2024-39359
Published: 2025-01-14
Description: A stack-based buffer overflow vulnerability exists in the wireless.cgi DeleteMac() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-121
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2040; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2040
CVE: CVE-2024-39360
Published: 2025-01-14
Description: An os command injection vulnerability exists in the nas.cgi remove_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-77
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2054; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2054
CVE: CVE-2024-39363
Published: 2025-01-14
Description: A cross-site scripting (xss) vulnerability exists in the login.cgi set_lang_CountryCode() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-80
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2017; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2017
CVE: CVE-2024-39367
Published: 2025-01-14
Description: An os command injection vulnerability exists in the firewall.cgi iptablesWebsFilterRun() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-77
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2023; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2023
CVE: CVE-2024-39370
Published: 2025-01-14
Description: An arbitrary code execution vulnerability exists in the adm.cgi set_MeshAp() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2031; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2031
CVE: CVE-2024-39602
Published: 2025-01-14
Description: An external config control vulnerability exists in the nas.cgi set_nas() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-15
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2052; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2052
CVE: CVE-2024-39603
Published: 2025-01-14
Description: A stack-based buffer overflow vulnerability exists in the wireless.cgi set_wifi_basic_mesh() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-121
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2042; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2042
CVE: CVE-2024-39604
Published: 2025-01-14
Description: A command execution vulnerability exists in the update_filter_url.sh functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-74
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2038; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2038
CVE: CVE-2024-39608
Published: 2025-01-14
Description: A firmware update vulnerability exists in the login.cgi functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary firmware update. An attacker can send an unauthenticated message to trigger this vulnerability.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-306
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2036; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2036
CVE: CVE-2024-39754
Published: 2025-01-14
Description: A static login vulnerability exists in the wctrls functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted set of network packets can lead to root access. An attacker can send packets to trigger this vulnerability.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-912
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2034; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2034
CVE: CVE-2024-39756
Published: 2025-01-14
Description: A buffer overflow vulnerability exists in the adm.cgi rep_as_router() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2024; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2024
CVE: CVE-2024-39757
Published: 2025-01-14
Description: A stack-based buffer overflow vulnerability exists in the wireless.cgi AddMac() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-121
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2043; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2043
CVE: CVE-2024-39759
Published: 2025-01-14
Description: Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these vulnerabilities.A command injection vulnerability exists within the `restart_hour_value` POST parameter.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-77
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2018; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2018
CVE: CVE-2024-39760
Published: 2025-01-14
Description: Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these vulnerabilities.A command injection vulnerability exists within the `restart_min_value` POST parameter.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-77
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2018; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2018
CVE: CVE-2024-39761
Published: 2025-01-14
Description: Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these vulnerabilities.A command injection vulnerability exists within the `restart_week_value` POST parameter.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-77
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2018; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2018
CVE: CVE-2024-39762
Published: 2025-01-14
Description: Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command injection vulnerability exists in the `netmask` POST parameter.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-77
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2020; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2020
CVE: CVE-2024-39763
Published: 2025-01-14
Description: Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command injection vulnerability exists in the `gateway` POST parameter.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-77
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2020; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2020
CVE: CVE-2024-39764
Published: 2025-01-14
Description: Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command injection vulnerability exists in the `dest` POST parameter.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-77
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2020; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2020
CVE: CVE-2024-39765
Published: 2025-01-14
Description: Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command injection vulnerability exists in the `custom_interface` POST parameter.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-77
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2020; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2020
CVE: CVE-2024-39768
Published: 2025-01-14
Description: Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerability exists in the `cli_name` POST parameter.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2022; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2022
CVE: CVE-2024-39769
Published: 2025-01-14
Description: Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerability exists in the `cli_mac` POST parameter.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2022; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2022
CVE: CVE-2024-39770
Published: 2025-01-14
Description: Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerability exists in the `en_enable` POST parameter.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2022; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2022
CVE: CVE-2024-39773
Published: 2025-01-14
Description: An information disclosure vulnerability exists in the testsave.sh functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2035; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2035
CVE: CVE-2024-39774
Published: 2025-01-14
Description: A buffer overflow vulnerability exists in the adm.cgi set_sys_adm() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2030; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2030
CVE: CVE-2024-39781
Published: 2025-01-14
Description: Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command injection vulnerability exists in the `restart_hour` POST parameter.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-77
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2033; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2033
CVE: CVE-2024-39782
Published: 2025-01-14
Description: Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command injection vulnerability exists in the `restart_min` POST parameter.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-77
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2033; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2033
CVE: CVE-2024-39783
Published: 2025-01-14
Description: Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command injection vulnerability exists in the `restart_week` POST parameter.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-77
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2033; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2033
CVE: CVE-2024-39784
Published: 2025-01-14
Description: Multiple command execution vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command injection vulnerability exists in the disk_part POST parameter.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-74
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2058; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2058
CVE: CVE-2024-39785
Published: 2025-01-14
Description: Multiple command execution vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command injection vulnerability exists in the adddir_name POST parameter.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-74
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2058; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2058
CVE: CVE-2024-39786
Published: 2025-01-14
Description: Multiple directory traversal vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A directory traversal vulnerability exists within the `adddir_name` POST parameter.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2057; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2057
CVE: CVE-2024-39787
Published: 2025-01-14
Description: Multiple directory traversal vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A directory traversal vulnerability exists within the `disk_part` POST parameter.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2057; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2057
CVE: CVE-2024-39788
Published: 2025-01-14
Description: Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A configuration injection vulnerability exists within the `ftp_name` POST parameter.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-15
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2056; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2056
CVE: CVE-2024-39789
Published: 2025-01-14
Description: Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A configuration injection vulnerability exists within the `ftp_port` POST parameter.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-15
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2056; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2056
CVE: CVE-2024-39790
Published: 2025-01-14
Description: Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A configuration injection vulnerability exists within the `ftp_max_sessions` POST parameter.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-15
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2056; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2056
CVE: CVE-2024-39793
Published: 2025-01-14
Description: Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A configuration injection vulnerability exists in the `ftp_name` POST parameter.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-15
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2053; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2053
CVE: CVE-2024-39794
Published: 2025-01-14
Description: Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A configuration injection vulnerability exists in the `ftp_port` POST parameter.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-15
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2053; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2053
CVE: CVE-2024-39795
Published: 2025-01-14
Description: Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A configuration injection vulnerability exists in the `ftp_max_sessions` POST parameter.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-15
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2053; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2053
CVE: CVE-2024-39798
Published: 2025-01-14
Description: Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A configuration injection vulnerability exists in the `sel_open_protocol` POST parameter.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-15
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2050; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2050
CVE: CVE-2024-39799
Published: 2025-01-14
Description: Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A configuration injection vulnerability exists in the `sel_open_interface` POST parameter.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-15
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2050; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2050
CVE: CVE-2024-39800
Published: 2025-01-14
Description: Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A configuration injection vulnerability exists in the `open_port` POST parameter.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-15
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2050; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2050