CVE-2023-27224

Name of the Vulnerable Software and Affected Versions NginxProxyManager version 2.9.19

Description An issue in NginxProxyManager allows an attacker to execute arbitrary code via a lua script to the configuration file. The vulnerability is related to the lack of data sanitization at the management level, which can be exploited by a remote attacker.

Recommendations For version 2.9.19, consider disabling the lua script execution in the configuration file as a temporary workaround until a patch is available. Restrict access to the configuration file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.