EDB-38846

functional

Nginx 1.1.17 - URI Processing SecURIty Bypass

view exploit source exploit_dbverifiedtype remoteauthor Ivan Fratricpublished 2013-11-19catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2013-4547US	high7.5	67.7% (99th)	Exploit	2013-11-23
nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.