CVE-2024-41637

RaspAP before 3.1.5 allows an attacker to escalate privileges: the www-data user has write access to the restapi.service file and also possesses Sudo privileges to execute several critical commands without a password...

CVE-2024-41637

RaspAP versions prior to 3.1.5 are vulnerable to a local privilege escalation flaw due to improper permission settings on the restapi.service file (located at /lib/systemd/system/restapi.service). The www-data user possesses write access to this service file and holds Sudo privileges to execute s...