Back to Database
Status published
High
CVE-2024-23828
Nginx-UI authenticated RCE through injecting into the application config via CRLF
Vulnerability Description
Nginx-UI is a web interface to manage Nginx configurations. It is vulnerable to an authenticated arbitrary command execution via CRLF attack when changing the value of test_config_cmd or start_cmd. This vulnerability exists due to an incomplete fix for CVE-2024-22197 and CVE-2024-22198. This vulnerability has been patched in version 2.0.0.beta.12.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-23828
Credits & Attribution
No credits recorded in the NVD database.
More from 0xJacky
View All →CVE-2024-49368
Unchecked logrotate settings lead to arbitrary command execution
High
8.9
CVE-2024-49367
Nginx UI's log path can be controlled
Medium
5.5
CVE-2024-49366
Nginx UI's json field can construct a directory traversal payload, causing arbitrary files to be written
High
7.7
CVE-2024-23827
Nginx-UI arbitrary file write through the Import Certificate feature
Critical
9.8
CVE-2024-22198
Authenticated (user role) arbitrary command execution by modifying `start_cmd` setting (GHSL-2023-268)
High
7.1
Affected Vendor
0xJacky
View all reports →Affected Software
nginx-ui
Vulnerable Versions:
< v2.0.0.beta.12
Timeline
Official Publish:
January 29th, 2024
Last Modified:
November 12th, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H