wargio vulnerabilities

Products

• naxsi 2

Latest wargio CVEs

Newest publication first

1. CVE-2023-45132 IgnoreIP/IgnoreCIDR should not trust X-Forwarded-For

   Published 2023-10-11

   Critical·CVSS 9.8 EPSS 0.99%

   NAXSI is an open-source maintenance web application firewall (WAF) for NGINX. An issue present starting in version 1.3 and prior to version 1.6 allows someone to bypass the WAF when a malicious X-Forwarded-For IP matches IgnoreIP IgnoreCIDR rules. This old code was arranged to al...

2. CVE-2012-3380 Directory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors.

   Published 2012-08-31

   Low·CVSS 2.1 EPSS 1.2%

   Directory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.