CVE-2024-23827

Summary

CVE-2024-23827 is a vulnerability affecting Nginx-UI, a web interface for managing Nginx configurations. The Import Certificate feature in this software is susceptible to arbitrary file writes due to insufficient input validation. attackers can exploit this vulnerability by providing malicious certificate data, which is then saved to arbitrary system paths. This issue could potentially be leveraged for remote code execution, specifically by overwriting the app.ini configuration file. The vulnerability has been addressed in version 2.0.0.beta.12 of Nginx-UI.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.