Lucene search
+L

2 matches found

OSV
OSV
added 2024/01/11 4:30 p.m.6 views

GHSA-PXMR-Q2X3-9X9M Authenticated (user role) remote command execution by modifying `nginx` settings (GHSL-2023-269)

Summary The Home Preference page exposes a small list of nginx settings such as Nginx Access Log Path and Nginx Error Log Path. However, the API also exposes testconfigcmd, reloadcmd and restartcmd. While the UI doesn't allow users to modify any of these settings, it is possible to do so by sendi...

7.7CVSS7.8AI score0.01537EPSS
SaveExploits1References8
Rows per page
Query Builder