Количество 3
Количество 3
CVE-2024-39935
jc21 NGINX Proxy Manager before 2.11.3 allows backend/internal/certificate.js OS command injection by an authenticated user (with certificate management privileges) via untrusted input to the DNS provider configuration. NOTE: this is not part of any NGINX software shipped by F5.
GHSA-4qj8-cj7g-gfmf
jc21 NGINX Proxy Manager before 2.11.3 allows backend/internal/certificate.js OS command injection by an authenticated user (with certificate management privileges) via untrusted input to the DNS provider configuration. NOTE: this is not part of any NGINX software shipped by F5.
BDU:2024-05107
Уязвимость сценария backend/internal/certificate.js прокси-менеджера управления хостами NGINX Proxy Manager, позволяющая нарушителю выполнить произвольные команды
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-39935 jc21 NGINX Proxy Manager before 2.11.3 allows backend/internal/certificate.js OS command injection by an authenticated user (with certificate management privileges) via untrusted input to the DNS provider configuration. NOTE: this is not part of any NGINX software shipped by F5. | CVSS3: 8.8 | 1% Низкий | больше 1 года назад |
| GHSA-4qj8-cj7g-gfmf jc21 NGINX Proxy Manager before 2.11.3 allows backend/internal/certificate.js OS command injection by an authenticated user (with certificate management privileges) via untrusted input to the DNS provider configuration. NOTE: this is not part of any NGINX software shipped by F5. | CVSS3: 8.8 | 1% Низкий | больше 1 года назад |
 | BDU:2024-05107 Уязвимость сценария backend/internal/certificate.js прокси-менеджера управления хостами NGINX Proxy Manager, позволяющая нарушителю выполнить произвольные команды | CVSS3: 8.8 | 1% Низкий | почти 2 года назад |
Уязвимостей на страницу