Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-39987
8.8
HIGHCVSS v3
Published
August 1, 2023
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
A Command injection vulnerability in RaspAP 2.8.0 thru 2.9.2 allows an authenticated attacker to execute arbitrary OS commands as root via the "entity" POST parameters in /ajax/networking/get_wgkey.php.
RaspAP/raspap-webgui
GitHubThe easiest, full-featured wireless router setup for Debian-based devices. Period.
GitHubThe easiest, full-featured wireless router setup for Debian-based devices. Period.NVD