Approved changes feed: RSS · Atom

cpe:2.3:a:openwrt:luci:git-20.078.22902-0ed0d42:*:*:*:*:*:*:*

part: a version: git-20.078.22902-0ed0d42 update: *

VendorOpenwrt (f96faf39-ea80-51de-ab00-c5c27e1349a3)
ProductLuci (0d57d064-1e9c-521d-b896-467c89bb92fd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/openwrt/luci purl2cpe 2026-06-01 10:17:17.736760
pkg:pypi/openwrt-luci-rpc purl2cpe 2026-06-01 10:17:17.736762

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-10871 vulnerable 2026-06-08 05:16:35.981769 Details available
In OpenWrt LuCI git-20.x, remote unauthenticated attackers can retrieve the list of installed packages and services. NOTE: the vendor disputes the significance of this report because, for instances reachable by an unauthenticated actor, the same information is available in other (more complex) ways, and there is no plan to restrict the information further
Published: 2020-03-23T19:45:25.000Z
Updated: 2024-08-04T11:14:15.626Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.