{"action":"Upgrade billz/raspap-webgui to 2.8.9 or later.","affected":[{"fixed":"2.8.9","introduced":"0"}],"component":"billz/raspap-webgui","cve_ids":["CVE-2023-30260"],"ecosystem":"Packagist","epss":0.02484,"exploited":false,"fixed_versions":["2.8.9"],"ghsa_id":"GHSA-hhqm-f4m4-pq39","id":"tcs_01M5KF3PQ42QZ5SDVTA2EZN9E1","modified_at":"2024-02-16T08:20:34.740160Z","published_at":"2023-06-23T12:30:18Z","references":["https://osv.dev/vulnerability/GHSA-hhqm-f4m4-pq39","https://nvd.nist.gov/vuln/detail/CVE-2023-30260","https://github.com/RaspAP/raspap-webgui/pull/1322","https://github.com/RaspAP/raspap-webgui/commit/238e1670fcef8b18ec4628ee74fc345607536a16","https://eldstal.se/advisories/230328-raspap.html","https://github.com/RaspAP/raspap-webgui"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-hhqm-f4m4-pq39","url":"https://osv.dev/vulnerability/GHSA-hhqm-f4m4-pq39"}],"summary":"RaspAP raspap-webgui Command Injection vulnerability"}