CVE-2022-41435

概要

参考情報

• gist.github.com/librick/eacf19bcfc5ca964e0882b4ef9864bf5 · Exploit
• openwrt/luci commit 944b557 · Patch

luci のその他の脆弱性

• CVE-2026-32721中 4.8LuCI is the OpenWrt Configuration Interface. Versions prior to both 24.10.5 and 25.12.0, contain a stored XSS vulnerability in the wireless …
• CVE-2023-24181中 5.4LuCI openwrt-22.03 branch git-22.361.69894-438c598 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the co…
• CVE-2021-27821中 6.1The Web Interface for OpenWRT LuCI version 19.07 and lower has been discovered to have a cross-site scripting vulnerability.
• CVE-2020-10871中 5.3In OpenWrt LuCI git-20.x, remote unauthenticated attackers can retrieve the list of installed packages and services. NOTE: the vendor disput…
• CVE-2019-12272緊急 9.8In OpenWrt LuCI through 0.10, the endpoints admin/status/realtime/bandwidth_status and admin/status/realtime/wireless_status of the web appl…