CVE-2024-28753
RaspAP (aka raspap-webgui) through 3.0.9 allows remote attackers to read the /etc/passwd file via a crafted request.
Published: 2024-03-08 · CVSS: 6.5 · CVSS 3.1
RaspAP (aka raspap-webgui) through 3.0.9 allows remote attackers to read the /etc/passwd file via a crafted request.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7