CVE-2024-23827 - CVE House
Back to Database
Status published Critical CVE-2024-23827

Nginx-UI arbitrary file write through the Import Certificate feature

Vulnerability Description

Nginx-UI is a web interface to manage Nginx configurations. The Import Certificate feature allows arbitrary write into the system. The feature does not check if the provided user input is a certification/key and allows to write into arbitrary paths in the system. It's possible to leverage the vulnerability into a remote code execution overwriting the config file app.ini. Version 2.0.0.beta.12 fixed the issue.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-23827

Credits & Attribution

No credits recorded in the NVD database.

References

More from 0xJacky

View All →
CVE-2024-49368
Unchecked logrotate settings lead to arbitrary command execution
High 8.9
CVE-2024-49367
Nginx UI's log path can be controlled
Medium 5.5
CVE-2024-49366
Nginx UI's json field can construct a directory traversal payload, causing arbitrary files to be written
High 7.7
CVE-2024-23828
Nginx-UI authenticated RCE through injecting into the application config via CRLF
High 8.8
CVE-2024-22198
Authenticated (user role) arbitrary command execution by modifying `start_cmd` setting (GHSL-2023-268)
High 7.1

Affected Vendor

Affected Software

nginx-ui
Vulnerable Versions:
< 2.0.0.beta.12

Timeline

Official Publish: January 29th, 2024
Last Modified: November 12th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-22

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1005 Data from Local System
Collection
T1552 Unsecured Credentials
Credential Access
T1565.001 Stored Data Manipulation
Impact