← Database

CVE-2022-31161

CRITICAL CVSS: 10.0 Published: 2022-07-15 Modified: 2026-06-17

Description

Roxy-WI is a Web interface for managing HAProxy, Nginx and Keepalived servers. Prior to version 6.1.1.0, the system command can be run remotely via the subprocess_execute function without processing the inputs received from the user in the /app/options.py file. Version 6.1.1.0 contains a patch for this issue.

Affected Platforms

Roxy-Wi Roxy-Wi

Weakness Type

CWE-77, CWE-94, CWE-434

References