Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-33357
9.8
CRITICALCVSS v3
Published
June 9, 2021
CVSS v2
7.5 HIGH
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
A vulnerability exists in RaspAP 2.6 to 2.6.5 in the "iface" GET parameter in /ajax/networking/get_netcfg.php, when the "iface" parameter value contains special characters such as ";" which enables an unauthenticated attacker to execute arbitrary OS commands.
RaspAP/raspap-webgui
GitHubThe easiest, full-featured wireless router setup for Debian-based devices. Period.
GitHubThe easiest, full-featured wireless router setup for Debian-based devices. Period.NVD