CVSS 3.1
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Атакува се
Време до експлоатация
Атакува се по мрежата, без особени условия, без вход и след действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката не може да се автоматизира
Описание
Оригинално описание
Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, AuthRequired accepts a browser-managed token cookie as an API credential after the front end stores the JWT in that cookie. Because management endpoints do not universally require a CSRF token or perform Origin or Referer validation, a remote attacker can induce a logged-in administrator's browser to submit authenticated cross-site state-changing requests, including POST /api/configs. The attack requires an administrator account without OTP/Passkey or a target endpoint that does not require secure-session proof. The attacker cannot read the cross-origin response but can modify Nginx configuration, trigger reloads, or invoke other management operations reachable with the victim's session. This issue is fixed in version 2.5.0.
Засегнати продукти
- 0xJacky nginx-ui: >= 2.0.0, < 2.5.0
Вид слабост
История
- 9 октомври 2026 Публикувано
Други уязвимости в 0xJacky nginx-ui
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-107809
- https://nvd.nist.gov/vuln/detail/CVE-2026-107809
- https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-33rr-wq23-g6gg
- https://github.com/0xJacky/nginx-ui/commit/a3999bd78a3b97ab22e6b5e9fd478ac57598a954
- https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0