VYPR
← All advisories
Low severity3.5NVD Advisory· Published Jun 3, 2023· Updated Jun 17, 2026

CVE-2023-3085

CVE-2023-3085

Description

A vulnerability, which was classified as problematic, has been found in X-WRT luci up to 22.10_b202303061504. This issue affects the function run_action of the file modules/luci-base/ucode/dispatcher.uc of the component 404 Error Template Handler. The manipulation of the argument request_path leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 22.10_b202303121313 is able to address this issue. The patch is named 24d7da2416b9ab246825c33c213fe939a89b369c. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-230663.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • X WRT/luci3 versions
    cpe:2.3:a:x-wrt:luci:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:x-wrt:luci:*:*:*:*:*:*:*:*range: <22.10_b202303121313
    • (no CPE)range: up to 22.10_b202303061504
    • (no CPE)range: 22.10_b202303061504

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.