Nginx UI Injection Vulnerability

Nginx UI has an injection flaw before 2.0.0.beta.12 enabling command execution via test_config_cmd or start_cmd.

Reporter	Title	Published	Views	Family All 15
BDU FSTEC	The vulnerability of the app.ini configuration file of the Nginx UI server allows a hacker to execute arbitrary code.	31 Jan 202400:00	–	bdu_fstec
Circl	CVE-2024-23828	29 Jan 202418:22	–	circl
CVE	CVE-2024-23828	29 Jan 202416:49	–	cve
Cvelist	CVE-2024-23828 Nginx-UI authenticated RCE through injecting into the application config via CRLF	29 Jan 202416:49	–	cvelist
EUVD	EUVD-2024-0401	3 Oct 202520:07	–	euvd
Github Security Blog	Nginx-UI vulnerable to authenticated RCE through injecting into the application config via CRLF	29 Jan 202422:30	–	github
GitLab Advisory Database	Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')	29 Jan 202400:00	–	gitlab
NVD	CVE-2024-23828	29 Jan 202417:15	–	nvd
OSV	CVE-2024-23828 Nginx-UI authenticated RCE through injecting into the application config via CRLF	29 Jan 202416:49	–	osv
OSV	GHSA-QCJQ-7F7V-PVC8 Nginx-UI vulnerable to authenticated RCE through injecting into the application config via CRLF	29 Jan 202422:30	–	osv