Description
includes/configure_client.php in RaspAP 2.6.6 allows attackers to execute commands via command injection.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | billz/raspap-webgui | <= 2.6.6 | — | GHSA-7vph-p634-vrqf |
High · 8.8
CVE-2021-38556
EUVD-2021-2009GHSA-7vph-p634-vrqf
Command Injection in RaspAP 2.6.6
Published Aug 24, 2021 · Updated Aug 4, 2024 · Assigned by mitre