RaspAP (aka raspap-webgui) through 3.0.9 allows remote attackers to read the /etc/passwd file via a crafted request.

Published Mar 8, 2024 · Updated Nov 14, 2024 · Assigned by mitre