← All advisories

Unrated severityNVD Advisory· Published Mar 8, 2024· Updated Nov 14, 2024

CVE-2024-28753

CVE-2024-28753

Description

RaspAP (aka raspap-webgui) through 3.0.9 allows remote attackers to read the /etc/passwd file via a crafted request.

Affected products

2

RaspAP/raspap-webguicpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=3.0.9

Patches

Vulnerability mechanics

References

1

dustri.org/b/carrot-disclosure.htmlmitre

News mentions

0

No linked articles in our index yet.