Jc21 Nginx_proxy_manager
7 CVEs affecting Jc21 Nginx_proxy_manager. Latest disclosed: 2025-08-19. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-46256 | Critical | 9.8 | 2024-09-27 | A Command injection vulnerability in requestLetsEncryptSsl in NginxProxyManager 2.11.3 allows an attacker to RCE via Add Let's Encrypt Certificate. |
CVE-2023-27224 | Critical | 9.8 | 2023-03-22 | An issue found in NginxProxyManager v.2.9.19 allows an attacker to execute arbitrary code via a lua script to the configuration file. |
CVE-2024-39935 | High | 8.8 | 2024-07-04 | jc21 NGINX Proxy Manager before 2.11.3 allows backend/internal/certificate.js OS command injection by an authenticated user (with certificate management privil… |
CVE-2023-23596 | High | 8.8 | 2023-01-20 | jc21 NGINX Proxy Manager through 2.9.19 allows OS command injection. When creating an access list, the backend builds an htpasswd file with crafted username an… |
CVE-2024-46257 | Medium | 6.3 | 2024-09-27 | A Command injection vulnerability in requestLetsEncryptSslWithDnsChallenge in NginxProxyManager 2.11.3 allows an attacker to achieve remote code execution via… |
CVE-2019-15517 | Medium | 5.5 | 2019-08-23 | jc21 Nginx Proxy Manager before 2.0.13 allows %2e%2e%2f directory traversal. |
CVE-2025-50579 | Medium | 5.3 | 2025-08-19 | A CORS misconfiguration in Nginx Proxy Manager v2.12.3 allows unauthorized domains to access sensitive data, particularly JWT tokens, due to improper validatio… |