CVE-2013-4547

nginx <1.5.7 - Auth Bypass

Title source: llm

Description

nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI.

Exploits (3)

exploitdb WRITEUP VERIFIED
by Ivan Fratric · textremotemultiple
https://www.exploit-db.com/exploits/38846
nomisec WORKING POC 3 stars
by cyberharsh · poc
https://github.com/cyberharsh/Nginx-CVE-2013-4547
nomisec WRITEUP
by rsp243 · poc
https://github.com/rsp243/fix_nginx_CVE-2013-4547_IB

Scores

EPSS 0.9092
EPSS Percentile 99.6%

Details

CWE
CWE-116
Status published
Products (8)
f5/nginx 0.8.41 - 1.4.4
opensuse/opensuse 11.4
opensuse/opensuse 12.2
opensuse/opensuse 12.3
opensuse/opensuse 13.1
suse/lifecycle_management_server 1.3
suse/studio_onsite 1.3
suse/webyast 1.3
Published Nov 23, 2013
Tracked Since Feb 18, 2026