Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2022-41435

Published: 03/11/2022 Updated: 04/11/2022
CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3
VMScore: 0
Subscribe to Openwrt

Vulnerability Summary

OpenWRT LuCI version git-22.140.66206-02913be exists to contain a stored cross-site scripting (XSS) vulnerability in the component /system/sshkeys.js. This vulnerability allows malicious users to execute arbitrary web scripts or HTML via crafted public key comments.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

openwrt luci git-22.140.66206-02913be

References

CWE-79https://github.com/openwrt/luci/commit/944b55738e7f9685865d5298248b7fbd7380749ehttps://gist.github.com/librick/eacf19bcfc5ca964e0882b4ef9864bf5https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-3675CVE-2024-3400CVE-2024-23557mass assignmentCVE-2023-1389local file inclusionCVE-2024-32596file uploadCVE-2024-32593
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook