Lucene search
+L

2 matches found

OSV
OSV
•added 2026/10/12 8:44 p.m.•3 views

CVE-2026-84320 Nginx UI: Auto backup name allows path traversal outside validated storage path

Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.3, Nginx UI validates an automatic backup's storagepath, but AutoBackup.GetName returns a user-controlled name without rejecting path separators or parent-directory components, and downstream filename formatting embeds that...

6.3CVSS5.8AI score
SaveExploits0References5
Rows per page
Query Builder