CVE-2024-28139 — Privilege escalation through sudo misconfiguration
The www-data user can elevate its privileges because sudo is configured to allow the execution of the mount command as root without a password. Therefore, the privileges can be …
Published: 2024-12-11 · CVSS: 8.8 · CVSS 3.1
The www-data user can elevate its privileges because sudo is configured to allow the execution of the mount command as root without a password. Therefore, the privileges can be escalated to the root user. The risk has been accepted by the vendor and won't be fixed in the near future.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7