Nginx Ui Security Vulnerabilities and Issues — Nginx Ui CVE List

Lucene search

NginxuiNginx Ui

3 matches found

CVE•added 2024/10/21 5:15 p.m.•259 views

CVE-2024-49368

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.0.0-beta.36, when Nginx UI configures logrotate, it does not verify the input and directly passes it to exec.Command, causing arbitrary command execution. Version 2.0.0-beta.36 fixes this issue.

9.8CVSS9.7AI score0.44499EPSS

CVE•added 2024/10/21 5:15 p.m.•80 views

CVE-2024-49367

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.0.0-beta.36, the log path of nginxui is controllable. This issue can be combined with the directory traversal at /api/configs to read directories and file contents on the server. Version 2.0.0-beta.36 fixes the issue.

7.5CVSS7.5AI score0.00069EPSS

CVE•added 2024/10/21 5:15 p.m.•35 views

CVE-2024-49366

Nginx UI is a web user interface for the Nginx web server. Nginx UI v2.0.0-beta.35 and earlier gets the value from the json field without verification, and can construct a value value in the form of ../../. Arbitrary files can be written to the server, which may result in loss of permissions. Versi...

8.7CVSS7.5AI score0.00254EPSS