📦 Nginx Instance Manager

CVE-2023-28656 is an authorization bypass vulnerability in NGINX Management Suite that allows authenticated users to access configuration objects outside their assigned environment boundaries. This af...

A vulnerability in NGINX OSS and NGINX Plus allows attackers in a man-in-the-middle position on the upstream server side to inject plain text data into responses from proxied TLS servers. This affects...

A session fixation vulnerability in NGINX OpenID Connect reference implementation allows attackers to bind a victim's session to an attacker-controlled account by exploiting missing nonce validation d...