[CRITICAL] RaspAP allows an attacker to escalate privileges

PKSA-fnmc-s4nq-ydpw CVE-2024-41637 GHSA-q623-2j2j-23jj

Affected version: <=3.1.4

Reported by:
GitHub

[MEDIUM] RaspAP Vulnerable to Code Injection via an Unknown Process in File `includes/provider.php`

PKSA-cfpm-fx6k-5ggt CVE-2024-2497 GHSA-99wg-vmvq-2cp5

Affected version: <=3.0.9

Reported by:
GitHub

[HIGH] raspap-webgui vulnerable to denial of service

PKSA-4gh1-k8dy-rw9d CVE-2024-28754 GHSA-vc9f-mgxr-h32r

Affected version: <3.1.0

Reported by:
GitHub

[HIGH] RaspAP Command Injection vulnerability

PKSA-jbp1-r9st-tn2p CVE-2022-39987 GHSA-7r88-wjhj-jr8m

Affected version: >=2.8.0,<2.9.5

Reported by:
GitHub

[HIGH] RaspAP raspap-webgui Command Injection vulnerability

PKSA-38bq-8q68-st8x CVE-2023-30260 GHSA-hhqm-f4m4-pq39

Affected version: <2.8.9

Reported by:
GitHub