GHSA-qcjq-7f7v-pvc8

Source

https://github.com/advisories/GHSA-qcjq-7f7v-pvc8

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/01/GHSA-qcjq-7f7v-pvc8/GHSA-qcjq-7f7v-pvc8.json

JSON Data

https://api.test.osv.dev/v1/vulns/GHSA-qcjq-7f7v-pvc8

Aliases

Published

2024-01-29T22:30:24Z

Modified

2026-07-06T19:30:10Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator

Summary

Nginx-UI vulnerable to authenticated RCE through injecting into the application config via CRLF

Details

Summary

Fix bypass to the following bugs

Allowing to inject directly in the app.ini via CRLF to change the value of test_config_cmd and start_cmd resulting in an Authenticated RCE

Impact

Authenticated Remote execution on the host

Database specific

{
    "cwe_ids":  [
        "CWE-74"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2024-01-29T22:30:24Z",
    "nvd_published_at":  "2024-01-29T17:15:10Z",
    "severity":  "HIGH"
}

References

Affected packages

Go / github.com/0xJacky/Nginx-UI

Package

Name: github.com/0xJacky/Nginx-UI; View open source insights on deps.dev
Purl: pkg:golang/github.com/0xJacky/Nginx-UI

Affected ranges

Type: SEMVER
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.9.10-0.20240126104956-d70e37c8575e

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/01/GHSA-qcjq-7f7v-pvc8/GHSA-qcjq-7f7v-pvc8.json"