GHSA-hhqm-f4m4-pq39
RaspAP raspap-webgui Command Injection vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | billz/raspap-webgui | < 2.8.9 | 2.8.9 |
Details
As written in the advisory (Markdown source, shown as plain text).
Command injection vulnerability in RaspAP raspap-webgui 2.8.8 and earlier allows remote attackers to run arbitrary commands via crafted POST request to hostapd settings form.
References
External links from the advisory. They lead to third-party sites.