CVE-2024-46256 | Severity.io

Description

A Command injection vulnerability in requestLetsEncryptSsl in NginxProxyManager 2.11.3 allows an attacker to RCE via Add Let's Encrypt Certificate.

Related CPE's

Could not find any relations

References

Weaknesses

Secondary

CWE-77

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 · Critical

Information

Source identifier

Vulnerability status

Awaiting analysis

Published

2024-09-27T18:15:05.787

2 weeks ago

Last modified

2024-10-03T18:35:08.983

1 week ago