← Database

CVE-2024-46257

MEDIUM CVSS: 6.3 Published: 2024-09-27 Modified: 2026-06-17

Description

A Command injection vulnerability in requestLetsEncryptSslWithDnsChallenge in NginxProxyManager 2.11.3 allows an attacker to achieve remote code execution via Add Let's Encrypt Certificate. NOTE: this is not part of any NGINX software shipped by F5.

Affected Platforms

Jc21 Nginx Proxy Manager

Weakness Type

CWE-89

References