CVE-2024-28139

The www-data user can elevate its privileges because sudo is configured to allow the execution of the mount command as root without a password. Therefore, the privileges can be escalated to the root user. The risk has been accepted by the vendor and won't be fixed in the near future.

The www-data user can elevate its privileges because sudo is configured to allow the execution of the mount command as root without a password. Therefore, the privileges can be escalated to the root user. The risk has been accepted by the vendor and won't be fixed in the near future.

El usuario www-data puede elevar sus privilegios porque sudo está configurado para permitir la ejecución del comando mount como superusuario sin contraseña. Por lo tanto, los privilegios se pueden escalar al usuario raíz. El proveedor ha aceptado el riesgo y no se solucionará en el futuro cercano.