CVE-2024-49368
Unchecked logrotate settings lead to arbitrary command execution
Résumé
Unchecked logrotate settings lead to arbitrary command execution
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Nginx UI is a web user interface for the Nginx web server. Prior to version 2.0.0-beta.36, when Nginx UI configures logrotate, it does not verify the input and directly passes it to exec.Command, causing arbitrary command execution. Version 2.0.0-beta.36 fixes this issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web github.com