Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-39986
9.8
CRITICALCVSS v3
Published
August 1, 2023
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
A Command injection vulnerability in RaspAP 2.8.0 thru 2.8.7 allows unauthenticated attackers to execute arbitrary commands via the cfg_id parameter in /ajax/openvpn/activate_ovpncfg.php and /ajax/openvpn/del_ovpncfg.php.
RaspAP/raspap-webgui
GitHubThe easiest, full-featured wireless router setup for Debian-based devices. Period.
GitHubThe easiest, full-featured wireless router setup for Debian-based devices. Period.NVD