CVE-2021-38167

Published August 7th, 2021

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

7.5

HIGH

Affected

1

PROJECT

Description

Roxy-WI through 5.2.2.0 allows SQL Injection via check_login. An unauthenticated attacker can extract a valid uuid to bypass authentication.

roxy-wi/roxy-wi

Web interface for managing Haproxy, Nginx, Apache and Keepalived servers

GitHub

1.81K