Summary
generated automatically from NVD dataThe Naxsi module for Nginx contains a directory traversal flaw (CWE-22) in naxsi-ui/nx_extract.py. A local user could exploit it through unspecified vectors to read arbitrary files on the system. The NVD description lists versions before 0.46-1 as affected, and the issue is rated LOW with a CVSS v2.0 score of 2.1.
NVD description
Directory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors.
EPSS · FIRST.org
1.2%probability of exploitation in the next 30 days
Higher than 69% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-11-02, recomputed daily by FIRST.org.
CVSS v2.0 Score
Information
- Published
- 31 août 2012
- Updated
- 16 juin 2026
- Status
- Modified
- Source
- secalert@redhat.com
Affected products
Bounds published by NVD: "< 8.4.27" means 8.4.27 is no longer vulnerable. The fixed release to install is in the vendor advisory.
Weaknesses (CWE)
References (12)
- http://secunia.com/advisories/49811Vendor Advisory
- http://secunia.com/advisories/49811Vendor Advisory
Similar CVEs
Other vulnerabilities of type CWE-22
Know which CVEs hit the versions you run.
Add the product and its version: cveo.tech lists the CVEs that affect it right away, then alerts you by email when a new one affects it — including before NVD has finished its analysis. Free, an account is all it takes.