NginxProxyManager 2.11.3 - Remote Code Execution via Let's Encrypt Certificate Request
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2024-46256. PoCs published by barttran2k, kimtangker, TranDongA3.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2024-46256, demonstrating remote code execution (RCE) via command injection in the domain_names parameter of an API endpoint. The exploit authenticates, sends crafted payloads, and can establish a reverse shell.
Description
A Command injection vulnerability in requestLetsEncryptSsl in NginxProxyManager 2.11.3 allows an attacker to RCE via Add Let's Encrypt Certificate.
Exploits (3)
This repository contains a functional exploit for CVE-2024-46256, demonstrating remote code execution (RCE) via command injection in the domain_names parameter of an API endpoint. The exploit authenticates, sends crafted payloads, and can establish a reverse shell.
This repository contains a functional exploit for CVE-2024-46256, an RCE vulnerability in Nginx Proxy Manager 2.11.3. The exploit leverages template injection in the domain name field during certificate issuance to achieve remote code execution.
This repository provides a detailed technical analysis of CVE-2024-46256 and CVE-2024-46257, focusing on OS Command Injection in Nginx Proxy Manager v2.11.3. It includes a step-by-step PoC with payloads, screenshots, and root cause analysis, demonstrating authenticated RCE with root privileges.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H