CVE-2024-23828

creationtimestamp| type| source ---|---|--- 2024-01-29 18:22:26+00:00| seen| https://t.me/ctinow/175444 2024-01-31 04:35:19+00:00| seen| Telegram/2WM7CW-zVYkJgwnl8Z154EOtor4Wn3D5fXCS0sOFtTfJ8...

CVE-2024-23828 Nginx-UI authenticated RCE through injecting into the application config via CRLF

Nginx-UI is a web interface to manage Nginx configurations. It is vulnerable to an authenticated arbitrary command execution via CRLF attack when changing the value of testconfigcmd or startcmd. This vulnerability exists due to an incomplete fix for CVE-2024-22197 and CVE-2024-22198. This...