CVE-2023-3085

The CVE-2023-3085 entry concerns OpenWrt/X-WRT LuCI, affecting versions up to 22.10_b202303061504. The vulnerability is in the 404 Error Template Handler’s dispatcher.uc (run_action) where manipulating the argument request_path enables cross-site scripting. It is reported to be exploitable remote...