CVE-2024-22196
2 advisories.
Go/github.com/0xJacky/Nginx-UI CVE-2024-22196: high 7, EPSS 0.58%
Authenticated (user role) SQL injection in `OrderAndPaginate` (GHSL-2023-270)
Action: Upgrade github.com/0xJacky/Nginx-UI to 1.9.10-0.20231219195202-ec93ab05a3ec or later.
go get github.com/0xJacky/Nginx-UI@v1.9.10-0.20231219195202-ec93ab05a3ecAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.10-0.20231219195202-ec93ab05a3ec | - |
Fixed versions
| 1.9.10-0.20231219195202-ec93ab05a3ec |
Sources
- osv: GHSA-h374-mm57-879c
- https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-h374-mm57-879c
- https://nvd.nist.gov/vuln/detail/CVE-2024-22196
- https://github.com/0xJacky/nginx-ui/commit/ec93ab05a3ecbb6bcf464d9dca48d74452df8a5b
- https://github.com/0xJacky/nginx-ui
- https://github.com/0xjacky/nginx-ui/blob/04bf8ec487f06ab17a9fb7f34a28766e5f53885e/model/model.go#L278-L287
- https://github.com/0xjacky/nginx-ui/blob/04bf8ec487f06ab17a9fb7f34a28766e5f53885e/model/model.go#L91
- https://github.com/0xjacky/nginx-ui/blob/04bf8ec487f06ab17a9fb7f34a28766e5f53885e/model/model.go#L99C4
CVE-2024-22196 · published · modified · JSON
Go/github.com/0xJacky/Nginx-UI CVE-2024-22196: unknown, EPSS 0.58%
SQL injection in github.com/0xJacky/Nginx-UI
Action: Upgrade github.com/0xJacky/Nginx-UI to 1.9.10-0.20231219195202-ec93ab05a3ec or later.
go get github.com/0xJacky/Nginx-UI@v1.9.10-0.20231219195202-ec93ab05a3ecAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.10-0.20231219195202-ec93ab05a3ec | - |
Fixed versions
| 1.9.10-0.20231219195202-ec93ab05a3ec |
Sources
- osv: GO-2024-2463
- https://github.com/advisories/GHSA-h374-mm57-879c
- https://github.com/0xJacky/nginx-ui/commit/ec93ab05a3ecbb6bcf464d9dca48d74452df8a5b
CVE-2024-22196 · published · modified · JSON