critical9.8
CVE-2023-27224
An issue found in NginxProxyManager v.2.9.19 allows an attacker to execute arbitrary code via a lua script to the configuration file.
Impact
An issue found in NginxProxyManager v.2.9.19 allows an attacker to execute arbitrary code via a lua script to the configuration file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jc21 | Nginx Proxy Manager | Version 2.9.19 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/LinuxProgramDevelop/NginxProxyManagerCommandInjectVulnInfo/blob/main/Nginx_proxy_manager_Command_Inject_vulnerability.pdf
- https://github.com/NginxProxyManager/nginx-proxy-manager
- https://github.com/LinuxProgramDevelop/NginxProxyManagerCommandInjectVulnInfo/blob/main/Nginx_proxy_manager_Command_Inject_vulnerability.pdf
- https://github.com/NginxProxyManager/nginx-proxy-manager