Lucene search
+L

22 matches found

osv_ghsa
osv_ghsa
•added 2026/10/15 8:10 p.m.•8 views

GHSA-JRQ7-XRJX-PCFW Nginx UI: Auto backup name allows path traversal outside validated storage path

Summary Nginx UI validates backuppath and storagepath against the administrator-defined backup.GrantedAccessPath boundary, but the final auto-backup output filename is built from the user-controlled auto-backup name without stripping path separators or .. components. An authenticated user who can...

6.3CVSS5.9AI score0.00167EPSS
SaveExploits0References5
Rows per page
Query Builder