cert

May 5, 2023 GO-2024-2462 +4 more

  GO-2024-2462: Arbitrary command execution in github.com/0xJacky/Nginx-UI

  GO-2024-2463: SQL injection in github.com/0xJacky/Nginx-UI

  GO-2024-2464: Remote command execution in github.com/0xJacky/Nginx-UI

  GO-2024-2480: Nginx-UI vulnerable to authenticated RCE through injecting into the application config via CRLF in github.com/0xJacky/Nginx-UI

  GO-2024-2481: Nginx-UI vulnerable to arbitrary file write through the Import Certificate feature in github.com/0xJacky/Nginx-UI

Changes in this version

+ const DNS01

+ const HTTP01

+ func AutoObtain()

+ func GetCertInfo(sslCertificatePath string) (cert *x509.Certificate, err error)

+ func IssueCert(payload *ConfigPayload, logChan chan string, errChan chan error)

+ type AutoCertErrorLog struct

+ func (t *AutoCertErrorLog) Exit(text string, err error)

+ func (t *AutoCertErrorLog) Push(text string, err error)

+ func (t *AutoCertErrorLog) SetCertModel(cert *model.Cert)

+ func (t *AutoCertErrorLog) ToString() (content string)

+ type ConfigPayload struct

+ ChallengeMethod string

+ DNSCredentialID int

+ ServerName []string

+ type MyUser struct

+ Email string

+ Key crypto.PrivateKey

+ Registration *registration.Resource

+ func (u *MyUser) GetEmail() string

+ func (u *MyUser) GetPrivateKey() crypto.PrivateKey

+ func (u *MyUser) GetRegistration() *registration.Resource

May 6, 2023 GO-2024-2462 +4 more

  GO-2024-2462: Arbitrary command execution in github.com/0xJacky/Nginx-UI

  GO-2024-2463: SQL injection in github.com/0xJacky/Nginx-UI

  GO-2024-2464: Remote command execution in github.com/0xJacky/Nginx-UI

  GO-2024-2480: Nginx-UI vulnerable to authenticated RCE through injecting into the application config via CRLF in github.com/0xJacky/Nginx-UI

  GO-2024-2481: Nginx-UI vulnerable to arbitrary file write through the Import Certificate feature in github.com/0xJacky/Nginx-UI

May 6, 2023 GO-2024-2462 +4 more

  GO-2024-2462: Arbitrary command execution in github.com/0xJacky/Nginx-UI

  GO-2024-2463: SQL injection in github.com/0xJacky/Nginx-UI

  GO-2024-2464: Remote command execution in github.com/0xJacky/Nginx-UI

  GO-2024-2480: Nginx-UI vulnerable to authenticated RCE through injecting into the application config via CRLF in github.com/0xJacky/Nginx-UI

  GO-2024-2481: Nginx-UI vulnerable to arbitrary file write through the Import Certificate feature in github.com/0xJacky/Nginx-UI

May 5, 2023 GO-2024-2462 +4 more

  GO-2024-2462: Arbitrary command execution in github.com/0xJacky/Nginx-UI

  GO-2024-2463: SQL injection in github.com/0xJacky/Nginx-UI

  GO-2024-2464: Remote command execution in github.com/0xJacky/Nginx-UI

  GO-2024-2480: Nginx-UI vulnerable to authenticated RCE through injecting into the application config via CRLF in github.com/0xJacky/Nginx-UI

  GO-2024-2481: Nginx-UI vulnerable to arbitrary file write through the Import Certificate feature in github.com/0xJacky/Nginx-UI