RaspAP WebGUI Vulnerable to Command Injection Attacks
CVE-2024-36622

Currently unrated

Key Information:

Vendor

RaspAP

Vendor
CVE Published:
29 November 2024

What is CVE-2024-36622?

In RaspAP raspap-webgui 3.0.9 and earlier, a command injection vulnerability exists in the clearlog.php script. The vulnerability is due to improper sanitization of user input passed via the logfile parameter.

References

https://github.com/raspap/raspap-webgui/commit/c98d2b0c15...
https://github.com/RaspAP/raspap-webgui/blob/3.0.9/ajax/l...
https://gist.github.com/1047524396/ab997b902ec892e592a0df...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.