Threats tagged 'ghsa-886j-w36h-wmx2'

Nginx Proxy Manager versions up to 2.16.0 contain an authorization flaw that allows non-administrator users with manage permissions to inject arbitrary nginx directives via the advanced_config field. This improper restriction can enable attackers to manipulate nginx configurations, such as serving arbitrary files or controlling routing for their assigned hosts.