CVE-2024-36622: Command Injection
In RaspAP raspap-webgui 3.0.9 and earlier, a command injection vulnerability exists in the clearlog.php script. The vulnerability is due to improper sanitization of user input passed via the logfile parameter.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36622?
CVE-2024-36622 is classified as a high severity vulnerability due to the potential for remote command injection.
How do I fix CVE-2024-36622?
To fix CVE-2024-36622, upgrade RaspAP raspap-webgui to version 3.0.10 or later, which includes a patch for the command injection vulnerability.
What component is affected by CVE-2024-36622?
CVE-2024-36622 affects the clearlog.php script within the RaspAP raspap-webgui application.
What type of vulnerability is CVE-2024-36622?
CVE-2024-36622 is a command injection vulnerability resulting from improper sanitization of user input.
Can CVE-2024-36622 lead to data compromise?
Yes, CVE-2024-36622 can lead to unauthorized access or execution of arbitrary commands on the server, potentially compromising sensitive data.