← Back to browse · API

CVE-2024-49368

Severity
HIGH
CVSS
8.9
EPSS
0.27475
Risk score
45.22
CISA KEV
No
PoC
No
Published
2024-10-21
Modified
2024-11-01
First seen
2026-08-07
Aliases
EUVD-2024-43405
Products
0xJacky:nginx-ui < 2.0.0-beta.36
Sources
euvd EUVD-2024-43405

Description

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.0.0-beta.36, when Nginx UI configures logrotate, it does not verify the input and directly passes it to exec.Command, causing arbitrary command execution. Version 2.0.0-beta.36 fixes this issue.

References