Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-94935
HistoryAug 09, 2021 - 12:00 a.m.

Roxy-WI Command Injection Vulnerability

2021-08-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
6

0.001 Low

EPSS

Percentile

47.3%

Roxy-WI, the web interface for managing Haproxy, Nginx, and Keepalived servers, is vulnerable to a command injection vulnerability in Roxy-WI 5.2.2.0 and earlier. An attacker can exploit this vulnerability to conduct command injection attacks via /app/funct.py and /api/api_funct.py.

CPENameOperatorVersion
Roxy-WI Roxy-WI <=5.eq2.2.0

0.001 Low

EPSS

Percentile

47.3%

Related for CNVD-2021-94935