Executive brief
Command Injection in RaspAP 2.6.6
Affected products
- Packagist billz/raspap-webgui
Junglewise Threat Intelligence
CVE-2021-38556: Command Injection in RaspAP 2.6.6
CVE-2021-38556 · Severity: low · CVSS 3.1 · Published 2021-09-02
Technologies: billz/raspap-webgui (Packagist). Vendors: Packagist.
Related threats
- RaspAP raspap-webgui contains an OS Command Injection vulnerability
- raspap-webgui has a Directory Traversal vulnerability
- RaspAP allows an attacker to escalate privileges
- RaspAP Vulnerable to Code Injection via an Unknown Process in File `includes/provider.php`
- raspap-webgui vulnerable to denial of service