CVE-2024-53442

whapa v1.59 is vulnerable to Command Injection via a crafted filename to the HTML reports component...

PT-2024-35743 · Whapa · Whapa

Name of the Vulnerable Software and Affected Versions: whapa version 1.59 Description: The issue concerns command injection via a crafted filename in the HTML reports component. This allows for potential exploitation through manipulated file names. Recommendations: For whapa version 1.59, conside...

CVE-2024-53442

CVE-2024-53442 affects whapa v1.59; a command injection can be triggered by a crafted filename in the HTML reports component. The CVSSv3.1 base score is 9.8 (CRITICAL). Reported by multiple sources (NVD/Red Hat/CNNVD) with exploitation considerations and references. Practical impact is potential ...