Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A CORS misconfiguration in Nginx Proxy Manager v2.12.3 allows unauthorized domains to access sensitive data, particularly JWT tokens, due to improper validation of the Origin header. This misconfiguration enables attackers to intercept tokens using a simple browser script and exfiltrate them to a remote attacker-controlled server, potentially leading to unauthorized actions within the application.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Nginx Proxy Manager 安全漏洞
Vulnerability Description
Nginx Proxy Manager是Nginx Proxy Manager开源的一个 Docker 容器。用于通过简单、强大的接口管理 Nginx 代理主机。 Nginx Proxy Manager v2.12.3版本存在安全漏洞，该漏洞源于CORS配置不当，可能导致数据泄露。
CVSS Information
N/A
Vulnerability Type
N/A