high8.8
CVE-2024-28139
The www-data user can elevate its privileges because sudo is configured to allow the execution of the mount command as root without a password.
Impact
The www-data user can elevate its privileges because sudo is configured to allow the execution of the mount command as root without a password. Therefore, the privileges can be escalated to the root user. The risk has been accepted by the vendor and won't be fixed in the near future.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.