CVE-2024-28753

creationtimestamp| type| source ---|---|--- 2024-03-09 01:26:08+00:00| seen| https://t.me/ctinow/203706 2024-03-09 01:26:10+00:00| seen| https://t.me/ctinow/203708...

CVE-2024-28753

CVE-2024-28753 affects RaspAP (raspap-webgui) up to version 3.0.9. The issue allows remote attackers to read the /etc/passwd file via a crafted request, revealing sensitive local user information. Root cause: likely an improper access path/authorization check that permits reading sensitive system...