Vulnerability Details CVE-2023-3085
A vulnerability, which was classified as problematic, has been found in X-WRT luci up to 22.10_b202303061504. This issue affects the function run_action of the file modules/luci-base/ucode/dispatcher.uc of the component 404 Error Template Handler. The manipulation of the argument request_path leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 22.10_b202303121313 is able to address this issue. The patch is named 24d7da2416b9ab246825c33c213fe939a89b369c. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-230663.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 21.7%
CVSS Severity
CVSS v3 Score 3.5
CVSS v2 Score 4.0
Products affected by CVE-2023-3085
-
-
cpe:2.3:a:x-wrt:luci:0.10.0
-
cpe:2.3:a:x-wrt:luci:0.11.0
-
cpe:2.3:a:x-wrt:luci:0.11.1
-
cpe:2.3:a:x-wrt:luci:0.8.0
-
cpe:2.3:a:x-wrt:luci:0.8.1
-
cpe:2.3:a:x-wrt:luci:0.8.2
-
cpe:2.3:a:x-wrt:luci:0.8.3
-
cpe:2.3:a:x-wrt:luci:0.8.4
-
cpe:2.3:a:x-wrt:luci:0.8.5
-
cpe:2.3:a:x-wrt:luci:0.8.6
-
cpe:2.3:a:x-wrt:luci:0.8.7
-
cpe:2.3:a:x-wrt:luci:0.8.8
-
cpe:2.3:a:x-wrt:luci:0.9.0
-
cpe:2.3:a:x-wrt:luci:21.10_b202111051830
-
cpe:2.3:a:x-wrt:luci:21.10_b202111191156
-
cpe:2.3:a:x-wrt:luci:21.10_b202111260705
-
cpe:2.3:a:x-wrt:luci:21.10_b202111271341
-
cpe:2.3:a:x-wrt:luci:21.10_b202111280050
-
cpe:2.3:a:x-wrt:luci:21.10_b202112032317
-
cpe:2.3:a:x-wrt:luci:21.10_b202112151800
-
cpe:2.3:a:x-wrt:luci:21.10_b202112171543
-
cpe:2.3:a:x-wrt:luci:21.10_b202112181729
-
cpe:2.3:a:x-wrt:luci:21.10_b202112191945
-
cpe:2.3:a:x-wrt:luci:21.10_b202201032246
-
cpe:2.3:a:x-wrt:luci:21.10_b202201140818
-
cpe:2.3:a:x-wrt:luci:21.10_b202201172351
-
cpe:2.3:a:x-wrt:luci:21.10_b202202222222
-
cpe:2.3:a:x-wrt:luci:22.02_b202203130310
-
cpe:2.3:a:x-wrt:luci:22.02_b202203190019
-
cpe:2.3:a:x-wrt:luci:22.02_b202203210043
-
cpe:2.3:a:x-wrt:luci:22.02_b202203220050
-
cpe:2.3:a:x-wrt:luci:22.02_b202203240321
-
cpe:2.3:a:x-wrt:luci:22.03_b202203290353
-
cpe:2.3:a:x-wrt:luci:22.03_b202204010337
-
cpe:2.3:a:x-wrt:luci:22.03_b202204032143
-
cpe:2.3:a:x-wrt:luci:22.03_b202204051420
-
cpe:2.3:a:x-wrt:luci:22.03_b202204051844
-
cpe:2.3:a:x-wrt:luci:22.03_b202204091331
-
cpe:2.3:a:x-wrt:luci:22.03_b202204150415
-
cpe:2.3:a:x-wrt:luci:22.03_b202204240424
-
cpe:2.3:a:x-wrt:luci:22.03_b202205021304
-
cpe:2.3:a:x-wrt:luci:22.03_b202205151055
-
cpe:2.3:a:x-wrt:luci:22.03_b202205250111
-
cpe:2.3:a:x-wrt:luci:22.03_b202205271526
-
cpe:2.3:a:x-wrt:luci:22.03_b202205290126
-
cpe:2.3:a:x-wrt:luci:22.03_b202206071646
-
cpe:2.3:a:x-wrt:luci:22.03_b202206101526
-
cpe:2.3:a:x-wrt:luci:22.03_b202206151531
-
cpe:2.3:a:x-wrt:luci:22.03_b202206180530
-
cpe:2.3:a:x-wrt:luci:22.03_b202206240046
-
cpe:2.3:a:x-wrt:luci:22.03_b202207031414
-
cpe:2.3:a:x-wrt:luci:22.03_b202207110353
-
cpe:2.3:a:x-wrt:luci:22.03_b202207182016
-
cpe:2.3:a:x-wrt:luci:22.03_b202207220722
-
cpe:2.3:a:x-wrt:luci:22.03_b202207230649
-
cpe:2.3:a:x-wrt:luci:22.03_b202207280130
-
cpe:2.3:a:x-wrt:luci:22.03_b202207300730
-
cpe:2.3:a:x-wrt:luci:22.03_b202208010100
-
cpe:2.3:a:x-wrt:luci:22.03_b202208061320
-
cpe:2.3:a:x-wrt:luci:22.03_b202208142114
-
cpe:2.3:a:x-wrt:luci:22.03_b202208200238
-
cpe:2.3:a:x-wrt:luci:22.03_b202208262013
-
cpe:2.3:a:x-wrt:luci:22.03_b202208290812
-
cpe:2.3:a:x-wrt:luci:22.03_b202209030817
-
cpe:2.3:a:x-wrt:luci:22.03_b202209102010
-
cpe:2.3:a:x-wrt:luci:22.03_b202209122254
-
cpe:2.3:a:x-wrt:luci:22.03_b202209152117
-
cpe:2.3:a:x-wrt:luci:22.03_b202209232002
-
cpe:2.3:a:x-wrt:luci:22.03_b202210011001
-
cpe:2.3:a:x-wrt:luci:22.03_b202210070809
-
cpe:2.3:a:x-wrt:luci:22.03_b202210091303
-
cpe:2.3:a:x-wrt:luci:22.03_b202210120655
-
cpe:2.3:a:x-wrt:luci:22.03_b202210140628
-
cpe:2.3:a:x-wrt:luci:22.03_b202210162124
-
cpe:2.3:a:x-wrt:luci:22.03_b202210182140
-
cpe:2.3:a:x-wrt:luci:22.03_b202210220209
-
cpe:2.3:a:x-wrt:luci:22.03_b202210282250
-
cpe:2.3:a:x-wrt:luci:22.10_b202210291113
-
cpe:2.3:a:x-wrt:luci:22.10_b202211050505
-
cpe:2.3:a:x-wrt:luci:22.10_b202211111111
-
cpe:2.3:a:x-wrt:luci:22.10_b202211120236
-
cpe:2.3:a:x-wrt:luci:22.10_b202211120852
-
cpe:2.3:a:x-wrt:luci:22.10_b202211130313
-
cpe:2.3:a:x-wrt:luci:22.10_b202211181447
-
cpe:2.3:a:x-wrt:luci:22.10_b202211250846
-
cpe:2.3:a:x-wrt:luci:22.10_b202212061809
-
cpe:2.3:a:x-wrt:luci:22.10_b202212111500
-
cpe:2.3:a:x-wrt:luci:22.10_b202212140413
-
cpe:2.3:a:x-wrt:luci:22.10_b202212180231
-
cpe:2.3:a:x-wrt:luci:22.10_b202212230054
-
cpe:2.3:a:x-wrt:luci:22.10_b202301010101
-
cpe:2.3:a:x-wrt:luci:22.10_b202301111153
-
cpe:2.3:a:x-wrt:luci:22.10_b202301241125
-
cpe:2.3:a:x-wrt:luci:22.10_b202301271130
-
cpe:2.3:a:x-wrt:luci:22.10_b202301281618
-
cpe:2.3:a:x-wrt:luci:22.10_b202302050001
-
cpe:2.3:a:x-wrt:luci:22.10_b202302102335
-
cpe:2.3:a:x-wrt:luci:22.10_b202302190944
-
cpe:2.3:a:x-wrt:luci:22.10_b202302270934
-
cpe:2.3:a:x-wrt:luci:22.10_b202303051440
-
cpe:2.3:a:x-wrt:luci:22.10_b202303061504
-
cpe:2.3:a:x-wrt:luci:6.0_b201910261253
-
cpe:2.3:a:x-wrt:luci:6.0_b201910290117
-
cpe:2.3:a:x-wrt:luci:6.0_b201911030405
-
cpe:2.3:a:x-wrt:luci:6.0_b201911111111
-
cpe:2.3:a:x-wrt:luci:6.0_b201911172222
-
cpe:2.3:a:x-wrt:luci:6.0_b201911201024
-
cpe:2.3:a:x-wrt:luci:6.0_b201911250240
-
cpe:2.3:a:x-wrt:luci:6.0_b201911301252
-
cpe:2.3:a:x-wrt:luci:6.0_b201912080827
-
cpe:2.3:a:x-wrt:luci:6.0_b201912140820
-
cpe:2.3:a:x-wrt:luci:6.0_b201912211804
-
cpe:2.3:a:x-wrt:luci:6.0_b201912240008
-
cpe:2.3:a:x-wrt:luci:6.0_b201912281025
-
cpe:2.3:a:x-wrt:luci:6.0_b201912290728
-
cpe:2.3:a:x-wrt:luci:6.0_b202001061628
-
cpe:2.3:a:x-wrt:luci:6.0_b202001092108
-
cpe:2.3:a:x-wrt:luci:7.0_b202001120437
-
cpe:2.3:a:x-wrt:luci:7.0_b202001150845
-
cpe:2.3:a:x-wrt:luci:7.0_b202001180941
-
cpe:2.3:a:x-wrt:luci:7.0_b202001230851
-
cpe:2.3:a:x-wrt:luci:7.0_b202001291329
-
cpe:2.3:a:x-wrt:luci:7.0_b202001312058
-
cpe:2.3:a:x-wrt:luci:7.0_b202002102216
-
cpe:2.3:a:x-wrt:luci:7.0_b202002111934
-
cpe:2.3:a:x-wrt:luci:7.0_b202002142341
-
cpe:2.3:a:x-wrt:luci:7.0_b202002210751
-
cpe:2.3:a:x-wrt:luci:7.0_b202002230943
-
cpe:2.3:a:x-wrt:luci:7.0_b202002270252
-
cpe:2.3:a:x-wrt:luci:7.0_b202002282318
-
cpe:2.3:a:x-wrt:luci:7.0_b202002290804
-
cpe:2.3:a:x-wrt:luci:7.0_b202003051537
-
cpe:2.3:a:x-wrt:luci:7.0_b202003060850
-
cpe:2.3:a:x-wrt:luci:7.0_b202003141026
-
cpe:2.3:a:x-wrt:luci:7.0_b202003151234
-
cpe:2.3:a:x-wrt:luci:7.0_b202003231342
-
cpe:2.3:a:x-wrt:luci:7.0_b202003281044
-
cpe:2.3:a:x-wrt:luci:7.0_b202004040450
-
cpe:2.3:a:x-wrt:luci:7.0_b202004102359
-
cpe:2.3:a:x-wrt:luci:7.0_b202004171158
-
cpe:2.3:a:x-wrt:luci:8.0_b202004180815
-
cpe:2.3:a:x-wrt:luci:8.0_b202004241024
-
cpe:2.3:a:x-wrt:luci:8.0_b202004280531
-
cpe:2.3:a:x-wrt:luci:8.0_b202004302359
-
cpe:2.3:a:x-wrt:luci:8.0_b202005092333
-
cpe:2.3:a:x-wrt:luci:8.0_b202005101652
-
cpe:2.3:a:x-wrt:luci:8.0_b202005130422
-
cpe:2.3:a:x-wrt:luci:8.0_b202005142226
-
cpe:2.3:a:x-wrt:luci:8.0_b202005230224
-
cpe:2.3:a:x-wrt:luci:8.0_b202005300657
-
cpe:2.3:a:x-wrt:luci:8.0_b202006050636
-
cpe:2.3:a:x-wrt:luci:8.0_b202006060606
-
cpe:2.3:a:x-wrt:luci:8.0_b202006130620
-
cpe:2.3:a:x-wrt:luci:8.0_b202006200120
-
cpe:2.3:a:x-wrt:luci:8.0_b202006250542
-
cpe:2.3:a:x-wrt:luci:8.0_b202006281500
-
cpe:2.3:a:x-wrt:luci:8.0_b202007040654
-
cpe:2.3:a:x-wrt:luci:8.0_b202007060706
-
cpe:2.3:a:x-wrt:luci:8.0_b202007071125
-
cpe:2.3:a:x-wrt:luci:8.0_b202007120712
-
cpe:2.3:a:x-wrt:luci:8.0_b202007121128
-
cpe:2.3:a:x-wrt:luci:8.0_b202007130713
-
cpe:2.3:a:x-wrt:luci:8.0_b202007181807
-
cpe:2.3:a:x-wrt:luci:8.0_b202007251036
-
cpe:2.3:a:x-wrt:luci:8.0_b202008020802
-
cpe:2.3:a:x-wrt:luci:8.0_b202008081818
-
cpe:2.3:a:x-wrt:luci:8.0_b202008161616
-
cpe:2.3:a:x-wrt:luci:8.0_b202008231309
-
cpe:2.3:a:x-wrt:luci:8.0_b202008301032
-
cpe:2.3:a:x-wrt:luci:8.0_b202009050516
-
cpe:2.3:a:x-wrt:luci:8.0_b202009061321
-
cpe:2.3:a:x-wrt:luci:8.0_b202009132240
-
cpe:2.3:a:x-wrt:luci:8.0_b202009190231
-
cpe:2.3:a:x-wrt:luci:8.0_b202009302121
-
cpe:2.3:a:x-wrt:luci:8.0_b202010051513
-
cpe:2.3:a:x-wrt:luci:8.0_b202010120559
-
cpe:2.3:a:x-wrt:luci:8.0_b202010190328
-
cpe:2.3:a:x-wrt:luci:8.0_b202010270008
-
cpe:2.3:a:x-wrt:luci:8.0_b202010281419
-
cpe:2.3:a:x-wrt:luci:8.0_b202011021240
-
cpe:2.3:a:x-wrt:luci:8.0_b202011051034
-
cpe:2.3:a:x-wrt:luci:8.0_b202011070045
-
cpe:2.3:a:x-wrt:luci:8.0_b202011161019
-
cpe:2.3:a:x-wrt:luci:8.0_b202011210550
-
cpe:2.3:a:x-wrt:luci:8.0_b202011241911
-
cpe:2.3:a:x-wrt:luci:8.0_b202011291414
-
cpe:2.3:a:x-wrt:luci:8.0_b202012071136
-
cpe:2.3:a:x-wrt:luci:8.0_b202012170013
-
cpe:2.3:a:x-wrt:luci:8.0_b202012211725
-
cpe:2.3:a:x-wrt:luci:8.0_b202012281647
-
cpe:2.3:a:x-wrt:luci:9.0_b202101041239
-
cpe:2.3:a:x-wrt:luci:9.0_b202101121505
-
cpe:2.3:a:x-wrt:luci:9.0_b202101181851
-
cpe:2.3:a:x-wrt:luci:9.0_b202101251550
-
cpe:2.3:a:x-wrt:luci:9.0_b202102011655
-
cpe:2.3:a:x-wrt:luci:9.0_b202102081450
-
cpe:2.3:a:x-wrt:luci:9.0_b202102151633
-
cpe:2.3:a:x-wrt:luci:9.0_b202102230038
-
cpe:2.3:a:x-wrt:luci:9.0_b202102270628
-
cpe:2.3:a:x-wrt:luci:9.0_b202103012043
-
cpe:2.3:a:x-wrt:luci:9.0_b202103132124
-
cpe:2.3:a:x-wrt:luci:9.0_b202103210628
-
cpe:2.3:a:x-wrt:luci:9.0_b202104032047
-
cpe:2.3:a:x-wrt:luci:9.0_b202104170928
-
cpe:2.3:a:x-wrt:luci:9.0_b202104271713
-
cpe:2.3:a:x-wrt:luci:9.0_b202105042338
-
cpe:2.3:a:x-wrt:luci:9.0_b202105110608
-
cpe:2.3:a:x-wrt:luci:9.0_b202105180518
-
cpe:2.3:a:x-wrt:luci:9.0_b202105231004
-
cpe:2.3:a:x-wrt:luci:9.0_b202105251550
-
cpe:2.3:a:x-wrt:luci:9.0_b202105311917
-
cpe:2.3:a:x-wrt:luci:9.0_b202106062146
-
cpe:2.3:a:x-wrt:luci:9.0_b202106150112
-
cpe:2.3:a:x-wrt:luci:9.0_b202106191124
-
cpe:2.3:a:x-wrt:luci:9.0_b202106212213
-
cpe:2.3:a:x-wrt:luci:9.0_b202106290618
-
cpe:2.3:a:x-wrt:luci:9.0_b202107052156
-
cpe:2.3:a:x-wrt:luci:9.0_b202107130301
-
cpe:2.3:a:x-wrt:luci:9.0_b202107210638
-
cpe:2.3:a:x-wrt:luci:9.0_b202107291043
-
cpe:2.3:a:x-wrt:luci:9.0_b202108091406
-
cpe:2.3:a:x-wrt:luci:9.0_b202108141018
-
cpe:2.3:a:x-wrt:luci:9.0_b202108291236
-
cpe:2.3:a:x-wrt:luci:9.0_b202109131311
-
cpe:2.3:a:x-wrt:luci:9.0_b202109200103
-
cpe:2.3:a:x-wrt:luci:9.0_b202109251248
-
cpe:2.3:a:x-wrt:luci:9.0_b202110011920
-
cpe:2.3:a:x-wrt:luci:9.0_b202110142350
-
cpe:2.3:a:x-wrt:luci:9.0_b202110271906
-
cpe:2.3:a:x-wrt:luci:9.0_b202110300939