CVE-2021-33356

Name of the Vulnerable Software and Affected Versions RaspAP versions 1.5 through 2.6.5

Description The issue allows an authenticated remote attacker to inject arbitrary commands to the /installers/common.sh component, resulting in remote command execution with root privileges.

Recommendations For RaspAP versions 1.5 through 2.6.5, update to a version that contains a fix for this issue to prevent remote command execution with root privileges. At the moment, there is no information about a newer version that contains a fix for this vulnerability.