CVE-2024-49367

Name of the Vulnerable Software and Affected Versions: Nginx UI versions prior to 2.0.0-beta.36

Description: The issue is related to the configuration settings of the Nginx UI server, specifically the /api/configs directory, and is associated with weaknesses in the authorization procedure. This can be combined with directory traversal to read directories and file contents on the server.

Recommendations: For versions prior to 2.0.0-beta.36, update to version 2.0.0-beta.36 to fix the issue. As a temporary workaround, consider restricting access to the /api/configs API endpoint until a patch is available.