Lucene search
PRIOn knowledge basePRION:CVE-2024-23828HistoryJan 29, 2024 - 5:15 p.m.
Design/Logic Flaw
2024-01-2917:15:00
PRIOn knowledge base
www.prio-n.com
4
nginx-ui
web interface
command execution
crlf attack
patch
version 2.0.0.beta.12
Nginx-UI is a web interface to manage Nginx configurations. It is vulnerable to an authenticated arbitrary command execution via CRLF attack when changing the value of test_config_cmd or start_cmd. This vulnerability exists due to an incomplete fix for CVE-2024-22197 and CVE-2024-22198. This vulnerability has been patched in version 2.0.0.beta.12.
Related
gitlab
gitlab
cve
cve
cvelist
cvelist
nvd
nvd
veracode
veracode
Command Injection
2024-01-12 10:34:00
Remote Code Execution
2024-01-30 07:26:29
Arbitrary Command Execution
2024-01-12 06:44:06
github
github
osv
osv
Nginx-UI vulnerable to authenticated RCE through injecting into the application config via CRLF
2024-01-29 22:30:24
CVE-2024-22197
2024-01-11 18:15:45
Remote command execution in github.com/0xJacky/Nginx-UI
2024-01-17 19:06:44
prion
prion
Information disclosure
2024-01-11 20:15:00
Information disclosure
2024-01-11 18:15:00