barttran2k/POC_CVE-2024-46256

Releases0

Stars6

POC_CVE-2024-46256

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-46256 ↗	Sep 27, 2024Friday, 27 September 2024, 18:15	9.8 CRITICAL	—
A Command injection vulnerability in requestLetsEncryptSsl in NginxProxyManager 2.11.3 allows an attacker to RCE via Add Let's Encrypt Certificate.
CVE-2024-46257 ↗	Sep 27, 2024Friday, 27 September 2024, 18:15	6.3 MEDIUM	—
A Command injection vulnerability in requestLetsEncryptSslWithDnsChallenge in NginxProxyManager 2.11.3 allows an attacker to achieve remote code execution via Add Let's Encrypt Certificate. NOTE: this is not part of any NGINX software shipped by F5.