RaspAP (aka raspap-webgui) through 3.0.9 allows remote attackers to cause a persistent denial of service (bricking) via a crafted request.Referenceshttps://dustri.org/b/carrot-disclosure.html