← Database

CVE-2023-25802

HIGH CVSS: 7.5 Published: 2023-03-13 Modified: 2026-06-17

Description

Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.6.0 don't correctly neutralize `dir/../filename` sequences, such as `/etc/nginx/../passwd`, allowing an actor to gain information about a server. Version 6.3.6.0 has a patch for this issue.

Affected Platforms

Roxy-Wi Roxy-Wi

Weakness Type

CWE-22, CWE-26, CWE-668

References