We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Assigner | mitre |
Reserved | 2024-07-04 |
Published | 2024-07-04 |
Updated | 2024-08-21 |
jc21 NGINX Proxy Manager before 2.11.3 allows backend/internal/certificate.js OS command injection by an authenticated user (with certificate management privileges) via untrusted input to the DNS provider configuration. NOTE: this is not part of any NGINX software shipped by F5.
https://github.com/NginxProxyManager/nginx-proxy-manager/compare/v2.11.2...v2.11.3
https://github.com/NginxProxyManager/nginx-proxy-manager/issues/3662