What is GHSA-7hgj-m3m7-73x6?

GHSA-7hgj-m3m7-73x6 is a security advisory published by GitHub Security Advisories with High severity. TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is vulnerable to Cross Site...

Which CVE IDs does GHSA-7hgj-m3m7-73x6 cover?

GHSA-7hgj-m3m7-73x6 covers the following CVE IDs: CVE-2021-31659. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-7hgj-m3m7-73x6?

GHSA-7hgj-m3m7-73x6 has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-7hgj-m3m7-73x6HighCVSS 8.8

TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is vulnerable to Cross Site...

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

July 5, 2026

🔗 CVE IDs covered (1)

CVE-2021-31659 →

📋 Description

TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is vulnerable to Cross Site Request Forgery (CSRF). All configuration information is placed in the URL, without any additional token authentication information. A malicious link opened by the switch administrator may cause the password of the switch to be modified and the configuration file to be tampered with.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2021-31659
https://github.com/liyansong2018/CVE/tree/main/2021/CVE-2021-31659
http://tp-link.com
https://github.com/advisories/GHSA-7hgj-m3m7-73x6