PT-2019-14239 · Nginx · Nginx Proxy Manager

Jlesage · Publicado 2019-08-23 · Atualizado 2019-08-27 · CVE-2019-15517

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Nginx Proxy Manager versions prior to 2.0.13

Description The issue allows directory traversal due to a flaw in handling URLs, specifically the %2e%2e%2f sequence, which can be used to access files outside the intended directory structure.

Recommendations For versions prior to 2.0.13, update to version 2.0.13 or later to resolve the issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2019-15517

Produtos afetados

Nginx Proxy Manager

Referências · 4

• https://github.com/jc21/nginx-proxy-manager/pull/114 · Correção
• https://github.com/jc21/nginx-proxy-manager/compare/2.0.12...2.0.13 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-15517 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-15517 · Aviso do Fabricante