Beveiligingsadvies

CVE-2024-36622

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-11-29 00:00:00
Laatst bijgewerkt 2024-12-03 15:26:18
Toegewezen door mitre
CVSS-score 9.8
Status PUBLISHED

Beschrijving

In RaspAP raspap-webgui 3.0.9 and earlier, a command injection vulnerability exists in the clearlog.php script. The vulnerability is due to improper sanitization of user input passed via the logfile parameter.