nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nginx | Aug 30, 2017 | Nov 23, 2013 |
| Debian | — | Upgrade nginx | Jul 30, 2024 | Nov 23, 2013 |
| Freebsd | — | Upgrade nginxUpgrade nginx-devel | Dec 10, 2025 | Nov 19, 2013 |
| Nginx | — | Upgrade to nginx version 1.4.4Upgrade to nginx version 1.5.7 | Jan 27, 2014 | Nov 23, 2013 |
| Suse | — | Upgrade nginx-1.0Upgrade nginx | Dec 12, 2013 | Nov 23, 2013 |
| Ubuntu | — | Upgrade nginx | Nov 19, 2024 | Nov 23, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub