CVE-2024-23828: Nginx-UI authenticated RCE through injecting into the application config via CRLF
Summary
Fix bypass to the following bugs
- https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-pxmr-q2x3-9x9m - https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-8r25-68wm-jw35
Allowing to inject directly in the app.ini via CRLF to change the value of testconfigcmd and startcmd resulting in an Authenticated RCE
Impact Authenticated Remote execution on the host
Other sources
Nginx-UI is a web interface to manage Nginx configurations. It is vulnerable to an authenticated arbitrary command execution via CRLF attack when changing the value of testconfigcmd or startcmd. This vulnerability exists due to an incomplete fix for CVE-2024-22197 and CVE-2024-22198. This vulnerability has been patched in version 2.0.0.beta.12.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
go/github.com/0xJacky/Nginx-UIto a version that resolves this vulnerability.Fixed in 2.0.0-beta.12 - Upgrade
Upgrade
nginx-uito a version that resolves this vulnerability.Fixed in 2.0.0.beta.12Patch GHSA-8r25-68wm-jw35 - Upgrade
Upgrade
nginx-uito a version that resolves this vulnerability.Fixed in 2.0.0.beta.12Patch GHSA-pxmr-q2x3-9x9m
Event History
Frequently Asked Questions
What is the severity of CVE-2024-23828?
CVE-2024-23828 is considered a critical vulnerability due to the potential for direct injection into the app.ini file.
How do I fix CVE-2024-23828?
To fix CVE-2024-23828, you should upgrade to version 2.0.0-beta.12 or later of Nginx-UI.
Which software versions are affected by CVE-2024-23828?
CVE-2024-23828 affects versions earlier than 2.0.0-beta.12 of Nginx-UI and several beta versions prior to that.
What types of attacks does CVE-2024-23828 facilitate?
CVE-2024-23828 facilitates configuration manipulation attacks by allowing CRLF injection into the application.
Is there a workaround for CVE-2024-23828?
There are no known workarounds for CVE-2024-23828; updating the software is the only recommended solution.