CVE
CVE-2022-38333
Openwrt before v21.02.3 and Openwrt v22.03.0-rc6 were discovered to contain two skip loops in the function header_value(). This vulnerability allows attackers to access sensitive information via a crafted HTTP request.
- Severity
- HIGH
- CVSS
- 7.5
- Published
- Modified
Linked Releases
| Distribution | Release | Status | Evidence |
|---|---|---|---|
| OpenWrt | 25.12.4 x86_64 target x86-64 | unknown | source |
| OpenWrt | 25.12.4 x86 target x86-generic | unknown | source |
| OpenWrt | 25.12.4 x86 target x86-geode | unknown | source |
| OpenWrt | 25.12.4 x86 target x86-legacy | unknown | source |
| OpenWrt | 25.12.5 x86_64 target x86-64 | unknown | source |
| OpenWrt | 25.12.5 x86 target x86-generic | unknown | source |
| OpenWrt | 25.12.5 x86 target x86-geode | unknown | source |
| OpenWrt | 25.12.5 x86 target x86-legacy | unknown | source |
References
- https://git.openwrt.org/?p=project/cgi-io.git%3Ba=commit%3Bh=901b0f0463c9d16a8cf5b9ed37118d8484bc9176
- https://git.openwrt.org/?p=project/cgi-io.git%3Ba=commitdiff%3Bh=901b0f0463c9d16a8cf5b9ed37118d8484bc9176
- https://git.openwrt.org/?p=project/cgi-io.git%3Ba=patch%3Bh=901b0f0463c9d16a8cf5b9ed37118d8484bc9176
- https://git.openwrt.org/?p=project/cgi-io.git%3Ba=commit%3Bh=901b0f0463c9d16a8cf5b9ed37118d8484bc9176
- https://git.openwrt.org/?p=project/cgi-io.git%3Ba=commitdiff%3Bh=901b0f0463c9d16a8cf5b9ed37118d8484bc9176
- https://git.openwrt.org/?p=project/cgi-io.git%3Ba=patch%3Bh=901b0f0463c9d16a8cf5b9ed37118d8484bc9176