Количество 2
Количество 2
CVE-2025-44163
RaspAP raspap-webgui 3.3.1 is vulnerable to Directory Traversal in ajax/networking/get_wgkey.php. An authenticated attacker can send a crafted POST request with a path traversal payload in the `entity` parameter to overwrite arbitrary files writable by the web server via abuse of the `tee` command used in shell execution.
GHSA-277f-37gw-9gmq
raspap-webgui has a Directory Traversal vulnerability
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-44163 RaspAP raspap-webgui 3.3.1 is vulnerable to Directory Traversal in ajax/networking/get_wgkey.php. An authenticated attacker can send a crafted POST request with a path traversal payload in the `entity` parameter to overwrite arbitrary files writable by the web server via abuse of the `tee` command used in shell execution. | CVSS3: 6.3 | 1% Низкий | около 1 года назад |
| GHSA-277f-37gw-9gmq raspap-webgui has a Directory Traversal vulnerability | 1% Низкий | около 1 года назад |
Уязвимостей на страницу