CVE-2024-23827

🗓️ 29 Jan 2024 16:15:09Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 13 Views

Nginx-UI web interface allows arbitrary write leading to remote code executio

Reporter	Title	Published	Views	Family All 15
BDU FSTEC	The vulnerability of the Import Certificate function in the Nginx UI server’s user interface allows a perpetrator to gain access to read, modify, and delete data, as well as execute arbitrary code.	31 Jan 202400:00	–	bdu_fstec
Circl	CVE-2024-23827	28 Jan 202407:07	–	circl
CNNVD	Nginx UI Path Traversal Vulnerability	29 Jan 202400:00	–	cnnvd
CVE	CVE-2024-23827	29 Jan 202416:07	–	cve
Cvelist	CVE-2024-23827 Nginx-UI arbitrary file write through the Import Certificate feature	29 Jan 202416:07	–	cvelist
EUVD	EUVD-2024-0460	3 Oct 202520:07	–	euvd
Github Security Blog	Nginx-UI vulnerable to arbitrary file write through the Import Certificate feature	29 Jan 202422:30	–	github
GitLab Advisory Database	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')	29 Jan 202400:00	–	gitlab
OSV	CVE-2024-23827 Nginx-UI arbitrary file write through the Import Certificate feature	29 Jan 202416:07	–	osv
OSV	GHSA-XVQ9-4VPV-227M Nginx-UI vulnerable to arbitrary file write through the Import Certificate feature	29 Jan 202422:30	–	osv

NVD

Node

nginxui nginx_uiMatch1.2.0-

OR

nginxui nginx_uiMatch1.2.0alpha2

OR

nginxui nginx_uiMatch1.2.0alpha3

OR

nginxui nginx_uiMatch1.2.0alpha4

OR

nginxui nginx_uiMatch1.2.0rc1

OR

nginxui nginx_uiMatch1.2.0rc2

OR

nginxui nginx_uiMatch1.2.0rc3

OR

nginxui nginx_uiMatch1.2.1

OR

nginxui nginx_uiMatch1.2.2

OR

nginxui nginx_uiMatch1.3.0-

OR

nginxui nginx_uiMatch1.3.0rc1

OR

nginxui nginx_uiMatch1.3.1-

OR

nginxui nginx_uiMatch1.3.1fix

OR

nginxui nginx_uiMatch1.3.2

OR

nginxui nginx_uiMatch1.3.3rc1

OR

nginxui nginx_uiMatch1.4.0-

OR

nginxui nginx_uiMatch1.4.0rc1

OR

nginxui nginx_uiMatch1.4.1

OR

nginxui nginx_uiMatch1.4.2

OR

nginxui nginx_uiMatch1.5.0-

OR

nginxui nginx_uiMatch1.5.0beta1

OR

nginxui nginx_uiMatch1.5.0beta2

OR

nginxui nginx_uiMatch1.5.0beta3

OR

nginxui nginx_uiMatch1.5.0beta4

OR

nginxui nginx_uiMatch1.5.0beta4_fix

OR

nginxui nginx_uiMatch1.5.0beta5

OR

nginxui nginx_uiMatch1.5.0beta6

OR

nginxui nginx_uiMatch1.5.0beta7

OR

nginxui nginx_uiMatch1.5.0beta8

OR

nginxui nginx_uiMatch1.5.0beta9

OR

nginxui nginx_uiMatch1.5.1

OR

nginxui nginx_uiMatch1.5.2

OR

nginxui nginx_uiMatch1.6.0-

OR

nginxui nginx_uiMatch1.6.0fix

OR

nginxui nginx_uiMatch1.6.1

OR

nginxui nginx_uiMatch1.6.2

OR

nginxui nginx_uiMatch1.6.3

OR

nginxui nginx_uiMatch1.6.5

OR

nginxui nginx_uiMatch1.6.6

OR

nginxui nginx_uiMatch1.6.7

OR

nginxui nginx_uiMatch1.6.8

OR

nginxui nginx_uiMatch1.7.0-

OR

nginxui nginx_uiMatch1.7.0patch

OR

nginxui nginx_uiMatch1.7.1

OR

nginxui nginx_uiMatch1.7.2

OR

nginxui nginx_uiMatch1.7.3

OR

nginxui nginx_uiMatch1.7.4

OR

nginxui nginx_uiMatch1.7.5

OR

nginxui nginx_uiMatch1.7.6

OR

nginxui nginx_uiMatch1.7.7

OR

nginxui nginx_uiMatch1.7.8

OR

nginxui nginx_uiMatch1.7.9

OR

nginxui nginx_uiMatch1.8.0

OR

nginxui nginx_uiMatch1.8.1

OR

nginxui nginx_uiMatch1.8.2

OR

nginxui nginx_uiMatch1.8.3

OR

nginxui nginx_uiMatch1.8.4-

OR

nginxui nginx_uiMatch1.8.4patch

OR

nginxui nginx_uiMatch1.9.9

OR

nginxui nginx_uiMatch1.9.9-1

OR

nginxui nginx_uiMatch1.9.9-2

OR

nginxui nginx_uiMatch1.9.9-3

OR

nginxui nginx_uiMatch1.9.9-4

OR

nginxui nginx_uiMatch2.0.0beta1

OR

nginxui nginx_uiMatch2.0.0beta10

OR

nginxui nginx_uiMatch2.0.0beta10_patch

OR

nginxui nginx_uiMatch2.0.0beta11

OR

nginxui nginx_uiMatch2.0.0beta2

OR

nginxui nginx_uiMatch2.0.0beta3

OR

nginxui nginx_uiMatch2.0.0beta4

OR

nginxui nginx_uiMatch2.0.0beta4_patch

OR

nginxui nginx_uiMatch2.0.0beta5

OR

nginxui nginx_uiMatch2.0.0beta5_patch

OR

nginxui nginx_uiMatch2.0.0beta6

OR

nginxui nginx_uiMatch2.0.0beta6_patch

OR

nginxui nginx_uiMatch2.0.0beta6_patch2

OR

nginxui nginx_uiMatch2.0.0beta7

OR

nginxui nginx_uiMatch2.0.0beta8

OR

nginxui nginx_uiMatch2.0.0beta8_patch

OR

nginxui nginx_uiMatch2.0.0beta9

Source	Link
github	www.github.com/0xJacky/nginx-ui/security/advisories/GHSA-xvq9-4vpv-227m

17 Jun 2026 07:13Current

9.8High risk

Vulners AI Score9.8

CVSS 3.19.8

EPSS0.00699

nginx-ui web interface arbitrary write remote code execution system paths vulnerability config file fix version 2.0.0.beta.12