CVE:CVE-2022-41435
CNNVD:CNNVD-202211-1989
OpenWrt LuCI是一款用于OpenWrt（Linux发行版）的图形化配置界面。
OpenWrt LuCI git-22.140.66206-02913be版本存在跨站脚本漏洞，该漏洞源于在组件/system/sshkeys.js中发现包含存储型跨站点脚本（XSS）漏洞。攻击者利用该漏洞可以执行任意web脚本或HTML。
solution:Upgrade openwrt luci to a higher version than git-22.140.66206-02913be,and avoid the version git-22.140.66206-02913be