CVE-2024-23827: Nginx-UI arbitrary file write through the Import Certificate feature

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-01-29 · updated 2026-06-17
Weakness: CWE-22

Description

Nginx-UI is a web interface to manage Nginx configurations. The Import Certificate feature allows arbitrary write into the system. The feature does not check if the provided user input is a certification/key and allows to write into arbitrary paths in the system. It's possible to leverage the vulnerability into a remote code execution overwriting the config file app.ini. Version 2.0.0.beta.12 fixed the issue.

Affected products

0xJacky nginx-ui: 1.2.0, 1.2.0-alpha2, 1.2.0-alpha3, 1.2.0-alpha4, 1.2.0-rc1, 1.2.0-rc2 (+74)

References

https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-xvq9-4vpv-227m
https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-xvq9-4vpv-227m

Get alerted when CVE-2024-23827 or the next vulnerability affects your stack