High severity8.8NVD Advisory· Published Aug 1, 2023· Updated Jun 17, 2026
CVE-2022-39987
CVE-2022-39987
Description
A Command injection vulnerability in RaspAP 2.8.0 thru 2.9.2 allows an authenticated attacker to execute arbitrary OS commands as root via the "entity" POST parameters in /ajax/networking/get_wgkey.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
billz/raspap-webguiPackagist | >= 2.8.0, < 2.9.5 | 2.9.5 |
Affected products
3- RaspAP/RaspAPdescription
Patches
Vulnerability mechanics
References
8- github.com/RaspAP/raspap-webgui/blob/master/ajax/networking/get_wgkey.phpnvdVendor AdvisoryWEB
- github.com/advisories/GHSA-7r88-wjhj-jr8mghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2022-39987ghsaADVISORY
- github.com/RaspAP/raspap-webgui/commit/e87e7d1d3a61617430851f2a040379de1ff3dd9dghsaWEB
- github.com/RaspAP/raspap-webgui/pull/1395ghsaWEB
- github.com/RaspAP/raspap-webgui/releases/tag/2.9.5ghsaWEB
- medium.com/@ismael0x00/multiple-vulnerabilities-in-raspap-3c35e78809f2ghsaWEB
- medium.com/%40ismael0x00/multiple-vulnerabilities-in-raspap-3c35e78809f2nvd
News mentions
0No linked articles in our index yet.