Lucene search
HistoryJan 29, 2024 - 4:15 p.m.
CVE-2024-23827
nginx-ui
web interface
arbitrary write
remote code execution
system paths
vulnerability
config file
fix
version 2.0.0.beta.12
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.8
Confidence
High
EPSS
0.002
Percentile
53.3%
Nginx-UI is a web interface to manage Nginx configurations. The Import Certificate feature allows arbitrary write into the system. The feature does not check if the provided user input is a certification/key and allows to write into arbitrary paths in the system. It’s possible to leverage the vulnerability into a remote code execution overwriting the config file app.ini. Version 2.0.0.beta.12 fixed the issue.
Affected configurations
Node
nginxuinginx_uiMatch1.2.0-
ORnginxuinginx_uiMatch1.2.0alpha2
ORnginxuinginx_uiMatch1.2.0alpha3
ORnginxuinginx_uiMatch1.2.0alpha4
ORnginxuinginx_uiMatch1.2.0rc1
ORnginxuinginx_uiMatch1.2.0rc2
ORnginxuinginx_uiMatch1.2.0rc3
ORnginxuinginx_uiMatch1.2.1
ORnginxuinginx_uiMatch1.2.2
ORnginxuinginx_uiMatch1.3.0-
ORnginxuinginx_uiMatch1.3.0rc1
ORnginxuinginx_uiMatch1.3.1-
ORnginxuinginx_uiMatch1.3.1fix
ORnginxuinginx_uiMatch1.3.2
ORnginxuinginx_uiMatch1.3.3rc1
ORnginxuinginx_uiMatch1.4.0-
ORnginxuinginx_uiMatch1.4.0rc1
ORnginxuinginx_uiMatch1.4.1
ORnginxuinginx_uiMatch1.4.2
ORnginxuinginx_uiMatch1.5.0-
ORnginxuinginx_uiMatch1.5.0beta1
ORnginxuinginx_uiMatch1.5.0beta2
ORnginxuinginx_uiMatch1.5.0beta3
ORnginxuinginx_uiMatch1.5.0beta4
ORnginxuinginx_uiMatch1.5.0beta4_fix
ORnginxuinginx_uiMatch1.5.0beta5
ORnginxuinginx_uiMatch1.5.0beta6
ORnginxuinginx_uiMatch1.5.0beta7
ORnginxuinginx_uiMatch1.5.0beta8
ORnginxuinginx_uiMatch1.5.0beta9
ORnginxuinginx_uiMatch1.5.1
ORnginxuinginx_uiMatch1.5.2
ORnginxuinginx_uiMatch1.6.0-
ORnginxuinginx_uiMatch1.6.0fix
ORnginxuinginx_uiMatch1.6.1
ORnginxuinginx_uiMatch1.6.2
ORnginxuinginx_uiMatch1.6.3
ORnginxuinginx_uiMatch1.6.5
ORnginxuinginx_uiMatch1.6.6
ORnginxuinginx_uiMatch1.6.7
ORnginxuinginx_uiMatch1.6.8
ORnginxuinginx_uiMatch1.7.0-
ORnginxuinginx_uiMatch1.7.0patch
ORnginxuinginx_uiMatch1.7.1
ORnginxuinginx_uiMatch1.7.2
ORnginxuinginx_uiMatch1.7.3
ORnginxuinginx_uiMatch1.7.4
ORnginxuinginx_uiMatch1.7.5
ORnginxuinginx_uiMatch1.7.6
ORnginxuinginx_uiMatch1.7.7
ORnginxuinginx_uiMatch1.7.8
ORnginxuinginx_uiMatch1.7.9
ORnginxuinginx_uiMatch1.8.0
ORnginxuinginx_uiMatch1.8.1
ORnginxuinginx_uiMatch1.8.2
ORnginxuinginx_uiMatch1.8.3
ORnginxuinginx_uiMatch1.8.4-
ORnginxuinginx_uiMatch1.8.4patch
ORnginxuinginx_uiMatch1.9.9
ORnginxuinginx_uiMatch1.9.9-1
ORnginxuinginx_uiMatch1.9.9-2
ORnginxuinginx_uiMatch1.9.9-3
ORnginxuinginx_uiMatch1.9.9-4
ORnginxuinginx_uiMatch2.0.0beta1
ORnginxuinginx_uiMatch2.0.0beta10
ORnginxuinginx_uiMatch2.0.0beta10_patch
ORnginxuinginx_uiMatch2.0.0beta11
ORnginxuinginx_uiMatch2.0.0beta2
ORnginxuinginx_uiMatch2.0.0beta3
ORnginxuinginx_uiMatch2.0.0beta4
ORnginxuinginx_uiMatch2.0.0beta4_patch
ORnginxuinginx_uiMatch2.0.0beta5
ORnginxuinginx_uiMatch2.0.0beta5_patch
ORnginxuinginx_uiMatch2.0.0beta6
ORnginxuinginx_uiMatch2.0.0beta6_patch
ORnginxuinginx_uiMatch2.0.0beta6_patch2
ORnginxuinginx_uiMatch2.0.0beta7
ORnginxuinginx_uiMatch2.0.0beta8
ORnginxuinginx_uiMatch2.0.0beta8_patch
ORnginxuinginx_uiMatch2.0.0beta9
| Vendor | Product | Version | CPE |
|---|---|---|---|
| nginxui | nginx_ui | 1.2.0 | cpe:2.3:a:nginxui:nginx_ui:1.2.0:-:*:*:*:*:*:* |
| nginxui | nginx_ui | 1.2.0 | cpe:2.3:a:nginxui:nginx_ui:1.2.0:alpha2:*:*:*:*:*:* |
| nginxui | nginx_ui | 1.2.0 | cpe:2.3:a:nginxui:nginx_ui:1.2.0:alpha3:*:*:*:*:*:* |
| nginxui | nginx_ui | 1.2.0 | cpe:2.3:a:nginxui:nginx_ui:1.2.0:alpha4:*:*:*:*:*:* |
| nginxui | nginx_ui | 1.2.0 | cpe:2.3:a:nginxui:nginx_ui:1.2.0:rc1:*:*:*:*:*:* |
| nginxui | nginx_ui | 1.2.0 | cpe:2.3:a:nginxui:nginx_ui:1.2.0:rc2:*:*:*:*:*:* |
| nginxui | nginx_ui | 1.2.0 | cpe:2.3:a:nginxui:nginx_ui:1.2.0:rc3:*:*:*:*:*:* |
| nginxui | nginx_ui | 1.2.1 | cpe:2.3:a:nginxui:nginx_ui:1.2.1:*:*:*:*:*:*:* |
| nginxui | nginx_ui | 1.2.2 | cpe:2.3:a:nginxui:nginx_ui:1.2.2:*:*:*:*:*:*:* |
| nginxui | nginx_ui | 1.3.0 | cpe:2.3:a:nginxui:nginx_ui:1.3.0:-:*:*:*:*:*:* |
Related
github
github
veracode
veracode
Arbitrary File Write
2024-01-30 08:29:47
osv
osv
Nginx-UI vulnerable to arbitrary file write through the Import Certificate feature
2024-01-29 22:30:18
Nginx-UI vulnerable to arbitrary file write through the Import Certificate feature in github.com/0xJacky/Nginx-UI
2024-06-28 15:28:53
CVE-2024-23827
2024-01-29 16:15:09
cvelist
cvelist
prion
prion
Remote code execution
2024-01-29 16:15:00
gitlab
gitlab
cve
cve
CVE-2024-23827
2024-01-29 16:15:09
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.8
Confidence
High
EPSS
0.002
Percentile
53.3%
Related for NVD:CVE-2024-23827