{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.1.4"}],"component":"billz/raspap-webgui","cve_ids":["CVE-2024-41637"],"ecosystem":"Packagist","epss":0.0081,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-q623-2j2j-23jj","id":"tcs_01M5KF6ZNZ7MY0ENZE72377R96","modified_at":"2024-08-02T16:05:52.213967Z","published_at":"2024-07-29T06:30:24Z","references":["https://osv.dev/vulnerability/GHSA-q623-2j2j-23jj","https://nvd.nist.gov/vuln/detail/CVE-2024-41637","https://blog.0xzon.dev/2024-07-27-CVE-2024-41637","https://github.com/RaspAP/raspap-webgui"],"severity":{"label":"critical","score":9.9},"sources":[{"source":"osv","source_id":"GHSA-q623-2j2j-23jj","url":"https://osv.dev/vulnerability/GHSA-q623-2j2j-23jj"}],"summary":"RaspAP allows an attacker to escalate privileges"}