Design/Logic Flaw

2022-09-1917:15:00

PRIOn knowledge base

www.prio-n.com

0.003 Low

EPSS

Percentile

68.0%

JSON

Openwrt before v21.02.3 and Openwrt v22.03.0-rc6 were discovered to contain two skip loops in the function header_value(). This vulnerability allows attackers to access sensitive information via a crafted HTTP request.

CPENameOperatorVersion
openwrteq22.3.0 rc6
openwrtlt21.02.3

CPE	Name	Operator	Version
	openwrt	eq	22.3.0 rc6
	openwrt	lt	21.02.3

References

git.openwrt.org/?p=project/cgi-io.git;a=commit;h=901b0f0463c9d16a8cf5b9ed37118d8484bc9176

git.openwrt.org/?p=project/cgi-io.git;a=commitdiff;h=901b0f0463c9d16a8cf5b9ed37118d8484bc9176

git.openwrt.org/?p=project/cgi-io.git;a=patch;h=901b0f0463c9d16a8cf5b9ed37118d8484bc9176

0.003 Low

EPSS

Percentile

68.0%

JSON

Related for PRION:CVE-2022-38333