Lucene search
Veracode Vulnerability DatabaseVERACODE:35130HistoryApr 16, 2022 - 7:11 p.m.
Authentication Bypass
2022-04-1619:11:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
0.001 Low
EPSS
Percentile
40.4%
ngx_http_lua_module is vulnerable to authentication bypass. The vulnerability exists because it doesn’t properly restrict the user inputs which allows an attacker to insert unsafe characters in an argument when using the API to mutate a URI, or a request or response header.
Related
cvelist
cvelist
CVE-2020-36309
2021-04-06 17:32:45
osv
osv
BIT-openresty-2020-36309
2024-03-06 10:59:59
CVE-2020-36309
2021-04-06 19:15:13
nginx vulnerability
2022-10-07 13:05:55
debiancve
debiancve
CVE-2020-36309
2021-04-06 19:15:13
ubuntucve
ubuntucve
CVE-2020-36309
2021-04-06 00:00:00
prion
prion
Cross site request forgery (csrf)
2021-04-06 19:15:00
nvd
nvd
CVE-2020-36309
2021-04-06 19:15:13
cve
cve
CVE-2020-36309
2021-04-06 19:15:13
ubuntu
ubuntu
nginx vulnerabilities
2022-04-12 00:00:00
nginx vulnerability
2022-10-07 00:00:00
nginx vulnerability
2022-04-28 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5371-1)
2022-04-14 00:00:00
Ubuntu: Security Advisory (USN-5371-2)
2022-04-29 00:00:00
Ubuntu: Security Advisory (USN-5371-3)
2022-10-10 00:00:00
nessus
nessus