Lucene search
GoogleOSV:GO-2024-2480HistoryJun 28, 2024 - 3:28 p.m.
Nginx-UI vulnerable to authenticated RCE through injecting into the application config via CRLF in github.com/0xJacky/Nginx-UI
2024-06-2815:28:53
Google
osv.dev
1
nginx-ui
authenticated
rce
crlf
injection
software
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
6.5 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
22.0%
Nginx-UI vulnerable to authenticated RCE through injecting into the application config via CRLF in github.com/0xJacky/Nginx-UI
Related
github
github
veracode
veracode
Remote Code Execution
2024-01-30 07:26:29
osv
osv
gitlab
gitlab
nvd
nvd
CVE-2024-23828
2024-01-29 17:15:10
prion
prion
Design/Logic Flaw
2024-01-29 17:15:00
cve
cve
CVE-2024-23828
2024-01-29 17:15:10
cvelist
cvelist
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
6.5 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
22.0%
Related for OSV:GO-2024-2480