{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"github.com/0xJacky/Nginx-UI","cve_ids":["CVE-2024-23827"],"ecosystem":"Go","epss":0.00705,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-xvq9-4vpv-227m","id":"tcs_01M5KG142M4W5RJYZ7RJ80KZ2T","modified_at":"2024-07-09T19:33:56Z","published_at":"2024-06-28T15:28:53Z","references":["https://osv.dev/vulnerability/GO-2024-2481","https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-xvq9-4vpv-227m","https://nvd.nist.gov/vuln/detail/CVE-2024-23827","https://github.com/0xJacky/nginx-ui/blob/f20d97a9fdc2a83809498b35b6abc0239ec7fdda/api/certificate/certificate.go#L72","https://github.com/0xJacky/nginx-ui/blob/f20d97a9fdc2a83809498b35b6abc0239ec7fdda/internal/cert/write_file.go#L15","https://github.com/0xJacky/nginx-ui/commit/8581bdd3c6f49ab345b773517ba9173fa7fc6199"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2481","url":"https://osv.dev/vulnerability/GO-2024-2481"}],"summary":"Nginx-UI vulnerable to arbitrary file write through the Import Certificate feature in github.com/0xJacky/Nginx-UI"}