CVE-2022-31161

Published July 15th, 2022

View on NVD ↗

CVSS v3

CRITICAL

CVSS v2

N/A

Affected

PROJECT

Description

Roxy-WI is a Web interface for managing HAProxy, Nginx and Keepalived servers. Prior to version 6.1.1.0, the system command can be run remotely via the subprocess_execute function without processing the inputs received from the user in the /app/options.py file. Version 6.1.1.0 contains a patch for this issue.

roxy-wi/roxy-wi

Web interface for managing Haproxy, Nginx, Apache and Keepalived servers

GitHub

1.81K