CVE-2022-38333: Openwrt

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Openwrt before v21.02.3 and Openwrt v22.03.0-rc6 were discovered to contain two skip loops in the function header_value(). This vulnerability allows attackers to access sensitive information via a crafted HTTP request.

Affected products

• Openwrt Openwrt: before 21.02.3 (fixed in 21.02.3); version 22.03.0 only

Published 2022-09-19. Last modified 2026-06-17.