medium6.5
CVE-2024-28753
RaspAP (aka raspap-webgui) through 3.0.9 allows remote attackers to read the /etc/passwd file via a crafted request.
Impact
RaspAP (aka raspap-webgui) through 3.0.9 allows remote attackers to read the /etc/passwd file via a crafted request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Raspap | Raspap | through 3.0.9 |