Approved changes feed: RSS · Atom

cpe:2.3:o:openwrt:lede:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorOpenwrt (f96faf39-ea80-51de-ab00-c5c27e1349a3)
ProductLede (dd617cf0-ca69-5816-b481-4ed1b43ad21a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/coolsnowwolf/lede purl2cpe 2026-06-01 10:17:17.726434
pkg:github/openwrt/openwrt purl2cpe 2026-06-01 10:17:17.726437

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-19630 vulnerable 2026-06-08 05:11:15.962645 Details available
cgi_handle_request in uhttpd in OpenWrt through 18.06.1 and LEDE through 17.01 has unauthenticated reflected XSS via the URI, as demonstrated by a cgi-bin/?[XSS] URI.
Published: 2018-11-28T10:00:00.000Z
Updated: 2024-08-05T11:44:19.424Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.