CVE-2024-2497
1 advisory.
Packagist/billz/raspap-webgui CVE-2024-2497: medium 4.7
RaspAP Vulnerable to Code Injection via an Unknown Process in File `includes/provider.php`
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.0.9 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-99wg-vmvq-2cp5
- https://nvd.nist.gov/vuln/detail/CVE-2024-2497
- https://github.com/RaspAP/raspap-webgui
- https://toradah.notion.site/Code-Injection-Leading-to-Remote-Code-Execution-RCE-in-RaspAP-Web-GUI-d321e1a416694520bec7099253c65060?pvs=4
- https://vuldb.com/?ctiid.256919
- https://vuldb.com/?id.256919
CVE-2024-2497 · published · modified · JSON