Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, an input validation vulnerability in the logrotate configuration allows an authenticated user to cause a complete Denial of Service (DoS). By submitting a negative integer for the rotation interval, the backend enters an infinite loop or an invalid state, rendering the web interface unresponsive. This issue has been patched in version 2.3.4.
| Vendor | Product | Versions |
|---|---|---|
| go | github.com/0xjacky/nginx-ui | go/github.com/0xJacky/Nginx-UI: <= 1.99 |
Updated vendor to 0xJacky, product to nginx-ui, affected versions to 2.3.3, severity to HIGH, and patch available to version 2.3.4.
Initial creation
