CVE-2022-31126
06.07.2022, 18:15
Roxy-wi is an open source web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A vulnerability in Roxy-wi allows a remote, unauthenticated attacker to code execution by sending a specially crafted HTTP request to /app/options.py file. This affects Roxy-wi versions before 6.1.1.0. Users are advised to upgrade. There are no known workarounds for this issue.
| Vendor | Product | Version |
|---|---|---|
| roxy-wi | roxy-wi | 𝑥 < 6.1.1.0 |
𝑥
= Vulnerable software versions