Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2024/01/11 4:30 p.m.50 views

Authenticated (user role) remote command execution by modifying `nginx` settings (GHSL-2023-269)

Summary The Home Preference page exposes a small list of nginx settings such as Nginx Access Log Path and Nginx Error Log Path. However, the API also exposes testconfigcmd, reloadcmd and restartcmd. While the UI doesn't allow users to modify any of these settings, it is possible to do so by sendi...

8.8CVSS7.1AI score0.01537EPSS
SaveExploits1References8Affected Software1
Rows per page
Query Builder