High severityNVD Advisory· Published Jun 23, 2023· Updated Dec 5, 2024

CVE-2023-30260

Description

Command injection vulnerability in RaspAP raspap-webgui 2.8.8 and earlier allows remote attackers to run arbitrary commands via crafted POST request to hostapd settings form.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
billz/raspap-webguiPackagist	< 2.8.9	2.8.9

Affected products

ghsa-coords
pkg:composer/billz/raspap-webgui
Range: < 2.8.9

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-hhqm-f4m4-pq39ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-30260ghsaADVISORY
eldstal.se/advisories/230328-raspap.htmlghsaWEB
github.com/RaspAP/raspap-webgui/commit/238e1670fcef8b18ec4628ee74fc345607536a16ghsaWEB
github.com/RaspAP/raspap-webgui/pull/1322ghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.002
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000