111
18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE (thehackernews.com)
submitted 5 months ago by to c/selfhosted@lemmy.world
12 comments fedilink hide all child comments
 

Update your nginx instances

cross-posted from: https://lemmy.world/post/46851448

CVE - Common Vulnerabilities and Exposures system
RCE - Remote Code Execution
PoC - Proof of Concept

you are viewing a single comment's thread
view the rest of the comments
[–] 12 points 5 months ago

Seems to be specific to rewrites using an un-named capture.

grep -rnE "\$[0-9.*].*\?" /etc/ngnix

should show if you have any potentially vulnerable directives in your config.

  • permalink
  • fedilink
  • source
    •