CVE-2022-41435

2022-11-0300:00:00

mitre

www.cve.org

openwrt

luci

xss

vulnerability

sshkeys.

0.001 Low

EPSS

Percentile

21.4%

JSON

OpenWRT LuCI version git-22.140.66206-02913be was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /system/sshkeys.js. This vulnerability allows attackers to execute arbitrary web scripts or HTML via crafted public key comments.