CVE-2024-41637
RaspAP before 3.1.5 allows an attacker to escalate privileges: the www-data user has write access to the restapi.service file and also possesses Sudo privileges to execute sever…
Published: 2024-07-29 · CVSS: 8.3 · CVSS 3.1
RaspAP before 3.1.5 allows an attacker to escalate privileges: the www-data user has write access to the restapi.service file and also possesses Sudo privileges to execute several critical commands without a password.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7