CVE-2023-24182

CVSS V2 None CVSS V3 None

Description

LuCI openwrt-22.03 branch git-22.361.69894-438c598 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the component /system/sshkeys.js.

Overview

CVE ID
CVE-2023-24182

Assigner
cve@mitre.org

Vulnerability Status
Analyzed

Published Version
2023-04-11T01:15:07

Last Modified Date
2023-04-17T14:25:39

Weakness Enumerations

CWE	URL
CWE-79	http://cwe.mitre.org/data/definitions/79.html

CPE Configuration (Product)

CPE	Vulnerable	Operator	Version Start	Version End
cpe:2.3:a:openwrt:openwrt:22.03.3:::::::*	1	OR

References

Reference URL	Reference Tags
https://github.com/ABB-EL/external-vulnerability-disclosures/security/advisories/GHSA-7vqh-2r8q-rjg2
https://github.com/openwrt/luci/commit/0186d7eae0e123a409e9919a83fdfecc7945c984
https://github.com/openwrt/luci/commit/588381e2111079265cc3b20af33507052f1b58cb
https://github.com/openwrt/luci/commit/aa7938d4cb3a3f889dead894ea19334ad07ade51

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-24182
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24182

History

Created	Old Value	New Value	Data Type	Notes
2023-04-17 04:27:58				Added to TrackCVE
2023-04-17 12:00:37	Awaiting Analysis	Undergoing Analysis	Vulnerability Status	updated
2023-04-17 15:00:38		2023-04-17T14:25:39	CVE Modified Date	updated
2023-04-17 15:00:38	Undergoing Analysis	Analyzed	Vulnerability Status	updated
2023-04-17 15:00:40			Weakness Enumeration	new
2023-04-17 15:00:42			CPE Information	updated