6 matches found
CVE-2026-84320 Nginx UI: Auto backup name allows path traversal outside validated storage path
Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.3, Nginx UI validates an automatic backup's storagepath, but AutoBackup.GetName returns a user-controlled name without rejecting path separators or parent-directory components, and downstream filename formatting embeds that...
CVE-2026-84320
Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.3, Nginx UI validates an automatic backup's storagepath, but AutoBackup.GetName returns a user-controlled name without rejecting path separators or parent-directory components, and downstream filename formatting embeds that...
CVE-2026-84320 Nginx UI: Auto backup name allows path traversal outside validated storage path
Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.3, Nginx UI validates an automatic backup's storagepath, but AutoBackup.GetName returns a user-controlled name without rejecting path separators or parent-directory components, and downstream filename formatting embeds that...
CVE-2026-84320
Nginx UI , a web user interface for the Nginx web server, is vulnerable to a path traversal vulnerability in versions prior to 2.4.3 . The root cause lies in the AutoBackup.GetName function, which returns a user-controlled name without rejecting path separators or parent-directory components. Thi...
CVE-2026-84320: Improper Limitation of a Pathname to a Restricted Directory
Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.3, Nginx UI validates an automatic backup's storagepath, but AutoBackup.GetName returns a user-controlled name without rejecting path separators or parent-directory components, and downstream filename formatting embeds that...
PT-2026-110953
Name of the Vulnerable Software and Affected Versions Nginx UI versions prior to 2.4.3 Description An authenticated user can manipulate the backup process by creating or modifying an automatic backup. The AutoBackup.GetName function returns a user-controlled name that does not reject path...