Security Advisory

CVE-2022-31161

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-07-15 00:00:00

Last updated 2025-04-23 18:01:57

Assigner GitHub_M

State PUBLISHED

Description

Roxy-WI is a Web interface for managing HAProxy, Nginx and Keepalived servers. Prior to version 6.1.1.0, the system command can be run remotely via the subprocess_execute function without processing the inputs received from the user in the /app/options.py file. Version 6.1.1.0 contains a patch for this issue.

← Browse all CVEs View on cve.org ↗