CVE-2024-49367

Published: 2024-10-21T17:15Z

Last Modified: 2024-11-07T14:57Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.0.0-beta.36, the log path of nginxui is controllable. This issue can be combined with the directory traversal at `/api/configs` to read directories and file contents on the server. Version 2.0.0-beta.36 fixes the issue. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt