Security Advisory

CVE-2024-36622

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-11-29 00:00:00
Last updated 2024-12-03 15:26:18
Assigner mitre
State PUBLISHED

Description

In RaspAP raspap-webgui 3.0.9 and earlier, a command injection vulnerability exists in the clearlog.php script. The vulnerability is due to improper sanitization of user input passed via the logfile parameter.