Vulnerability Description
Nginx-UI is a web interface to manage Nginx configurations. It is vulnerable to arbitrary command execution by abusing the configuration settings. The `Home > Preference` page exposes a list of system settings such as `Run Mode`, `Jwt Secret`, `Node Secret` and `Terminal Start Command`. While the UI doesn't allow users to modify the `Terminal Start Command` setting, it is possible to do so by sending a request to the API. This issue may lead to authenticated remote code execution, privilege escalation, and information disclosure. This vulnerability has been patched in version 2.0.0.beta.9.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Nginxui | Nginx Ui | < 2.0.0 |
Related Weaknesses (CWE)
References
- https://github.com/0xJacky/nginx-ui/blob/04bf8ec487f06ab17a9fb7f34a28766e5f53885Product
- https://github.com/0xJacky/nginx-ui/blob/04bf8ec487f06ab17a9fb7f34a28766e5f53885Product
- https://github.com/0xJacky/nginx-ui/blob/04bf8ec487f06ab17a9fb7f34a28766e5f53885Product
- https://github.com/0xJacky/nginx-ui/blob/04bf8ec487f06ab17a9fb7f34a28766e5f53885Product
- https://github.com/0xJacky/nginx-ui/blob/04bf8ec487f06ab17a9fb7f34a28766e5f53885Product
- https://github.com/0xJacky/nginx-ui/commit/827e76c46e63c52114a62a899f61313039c75Patch
- https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-8r25-68wm-jw35ExploitVendor Advisory
- https://github.com/0xJacky/nginx-ui/blob/04bf8ec487f06ab17a9fb7f34a28766e5f53885Product
- https://github.com/0xJacky/nginx-ui/blob/04bf8ec487f06ab17a9fb7f34a28766e5f53885Product
- https://github.com/0xJacky/nginx-ui/blob/04bf8ec487f06ab17a9fb7f34a28766e5f53885Product
- https://github.com/0xJacky/nginx-ui/blob/04bf8ec487f06ab17a9fb7f34a28766e5f53885Product
- https://github.com/0xJacky/nginx-ui/blob/04bf8ec487f06ab17a9fb7f34a28766e5f53885Product
- https://github.com/0xJacky/nginx-ui/commit/827e76c46e63c52114a62a899f61313039c75Patch
- https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-8r25-68wm-jw35ExploitVendor Advisory
FAQ
What is CVE-2024-22198?
CVE-2024-22198 is a vulnerability with a CVSS score of 7.1 (HIGH). Nginx-UI is a web interface to manage Nginx configurations. It is vulnerable to arbitrary command execution by abusing the configuration settings. The `Home > Preference` page exposes a list of system...
How severe is CVE-2024-22198?
CVE-2024-22198 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-22198?
Check the references section above for vendor advisories and patch information. Affected products include: Nginxui Nginx Ui.