{"action":"Upgrade billz/raspap-webgui to 2.8.8 or later.","affected":[{"fixed":"2.8.8","introduced":"2.8.0"}],"component":"billz/raspap-webgui","cve_ids":["CVE-2022-39986"],"ecosystem":"Packagist","epss":0.99058,"exploited":false,"fixed_versions":["2.8.8"],"ghsa_id":"GHSA-7c28-wg7r-pg6f","id":"tcs_01M5KEXXKQ30AJ8EMB1H0HT7HM","modified_at":"2024-02-16T08:01:44.327775Z","published_at":"2023-08-01T15:30:30Z","references":["https://osv.dev/vulnerability/GHSA-7c28-wg7r-pg6f","https://nvd.nist.gov/vuln/detail/CVE-2022-39986","https://github.com/RaspAP/raspap-webgui/pull/1303","https://github.com/RaspAP/raspap-webgui/commit/1fabc481690e008279113e18d0642c5279e3b56e","https://github.com/RaspAP/raspap-webgui","https://github.com/RaspAP/raspap-webgui/blob/master/ajax/openvpn/activate_ovpncfg.php","https://medium.com/@ismael0x00/multiple-vulnerabilities-in-raspap-3c35e78809f2"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-7c28-wg7r-pg6f","url":"https://osv.dev/vulnerability/GHSA-7c28-wg7r-pg6f"}],"summary":"RaspAP Command Injection vulnerability"}