Jc21 vulnerabilities
We track 2 vulnerabilities in Jc21 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 4, 2024.
2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score
Latest Jc21 vulnerabilities
- 8.8 High severity
nginx_proxy_manager: Improper Neutralization of Special Elements used in an OS Command
jc21 NGINX Proxy Manager before 2.11.3 allows backend/internal/certificate.js OS command injection by an authenticated user (with certificate management privileges) via untrusted input to the DNS provider configuration. NOTE: this is not part of any NGINX soft
- 8.8 High severity
Nginx Proxy Manager: Improper Neutralization of Special Elements used in an OS Command
jc21 NGINX Proxy Manager through 2.9.19 allows OS command injection. When creating an access list, the backend builds an htpasswd file with crafted username and/or password input that is concatenated without any validation, and is directly passed to the exec c