This vulnerability involves a rather unconventional vector for XSS - the comment field of an SSH public key. Since patched in newer versions of LuCI, which ensure to not display public key comments verbatim in order to prevent injection of any markup, including <script> tags.
Recent CVEs
-
CVE-2023-6246
1 Post
-
CVE-2023-7063
1 Post
-
CVE-2023-52251
1 Post
-
CVE-2023-5408
1 Post
-
CVE-2023-46450
1 Post
Activity Feed
-
NIKHIL KUMAR joined
-
usa M joined
-
g312ng joined
-
anup yadav joined
-
foxyrmcp joined
-
whoadmi_qiyue joined