CVE-2024-49366

Name of the Vulnerable Software and Affected Versions: Nginx UI versions 2.0.0-beta.35 and earlier

Description: The issue is related to the Nginx UI's handling of JSON fields without proper verification, allowing an attacker to construct a value in the form of ../../ and write arbitrary files to the server. This may result in loss of permissions. The vulnerability can be exploited by a remote attacker and may lead to unauthorized file writes.

Recommendations: For Nginx UI versions 2.0.0-beta.35 and earlier, update to version 2.0.0-beta.26 or later to fix the issue. As a temporary workaround, consider restricting access to the JSON handler to minimize the risk of exploitation.