Security Advisory

CVE-2024-49367

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-10-21 16:24:56

Last updated 2024-10-21 16:42:33

Assigner GitHub_M

CVSS score 5.5

State PUBLISHED

Description

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.0.0-beta.36, the log path of nginxui is controllable. This issue can be combined with the directory traversal at `/api/configs` to read directories and file contents on the server. Version 2.0.0-beta.36 fixes the issue.

← Browse all CVEs View on cve.org ↗