raspap-webgui vulnerable to denial of service

HIGH 7.5CVE-2024-28754 · GHSA-vc9f-mgxr-h32r · Published 09/03/2024 · updated 17/06/2026

In short

CVE-2024-28754 is a HIGH (CVSS 7.5) vulnerability affecting billz/raspap-webgui, raspap (raspap).
Chance of exploitation in the next 30 days (EPSS): 0.86%, higher than 58.4% of all vulnerabilities.
Fix: update to 3.1.0 or later.

Package	Affected versions	Patched versions
billz/raspap-webgui Packagist	`< 3.1.0`	`3.1.0`
raspap raspap	`≤ 3.0.9`	No fix yet

RaspAP (aka raspap-webgui) through 3.0.9 allows remote attackers to cause a persistent denial of service (bricking) via a crafted request.

NVD description

RaspAP (aka raspap-webgui) through 3.0.9 allows remote attackers to cause a persistent denial of service (bricking) via a crafted request.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 3.1.0

3.1.0

≤ 3.0.9

No fix yet

More vulnerabilities in billz/raspap-webgui

See all →