Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7chh-rv6q-8pp3

Опубликовано: 04 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.2
CVSS3: 5.9

Описание

A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security (TLS) servers. An attacker with a man-in-the-middle (MITM) position on the upstream server side—along with conditions beyond the attacker's control—may be able to inject plain text data into the response from an upstream proxied server.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security (TLS) servers. An attacker with a man-in-the-middle (MITM) position on the upstream server side—along with conditions beyond the attacker's control—may be able to inject plain text data into the response from an upstream proxied server.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

EPSS

Процентиль: 1%
0.00012
Низкий

8.2 High

CVSS4

5.9 Medium

CVSS3

Дефекты

CWE-349

Связанные уязвимости

CVSS3: 5.9
nvd
4 дня назад

A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security (TLS) servers. An attacker with a man-in-the-middle (MITM) position on the upstream server side—along with conditions beyond the attacker's control—may be able to inject plain text data into the response from an upstream proxied server.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CVSS3: 5.9
debian
4 дня назад

A vulnerability exists in NGINX OSS and NGINX Plus when configured to ...

EPSS

Процентиль: 1%
0.00012
Низкий

8.2 High

CVSS4

5.9 Medium

CVSS3

Дефекты

CWE-349