CVE-2013-4547
nginx <1.5.7 - Auth Bypass
Title source: llmDescription
nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI.
Exploits (3)
exploitdb
WRITEUP
VERIFIED
by Ivan Fratric · textremotemultiple
https://www.exploit-db.com/exploits/38846
References (9)
Scores
EPSS
0.9092
EPSS Percentile
99.6%
Details
CWE
CWE-116
Status
published
Products (8)
f5/nginx
0.8.41 - 1.4.4
opensuse/opensuse
11.4
opensuse/opensuse
12.2
opensuse/opensuse
12.3
opensuse/opensuse
13.1
suse/lifecycle_management_server
1.3
suse/studio_onsite
1.3
suse/webyast
1.3
Published
Nov 23, 2013
Tracked Since
Feb 18, 2026