Jc21: >> Nginx Proxy Manager >> 2.11.3 Security Vulnerabilities
A Command injection vulnerability in requestLetsEncryptSsl in NginxProxyManager 2.11.3 allows an attacker to RCE via Add Let's Encrypt Certificate.
CVSS Score
9.8
EPSS Score
0.416
Published
2024-09-27
A Command injection vulnerability in requestLetsEncryptSslWithDnsChallenge in NginxProxyManager 2.11.3 allows an attacker to achieve remote code execution via Add Let's Encrypt Certificate. NOTE: this is not part of any NGINX software shipped by F5.
CVSS Score
6.3
EPSS Score
0.004
Published
2024-09-27