VDB
BDU%3A2024-04386
BDU%3A2024-04386
PUBLISHED
CVSS 5 MEDIUM
Уязвимость модуля HTTP/3 QUIC (ngx_http_v3_module) веб-серверов NGINX Plus и NGINX OSS, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
Risk Scores
CVSS 2.0
5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| NGINX Inc., ООО "Веб-Сервер" | NGINX Plus, nginx, Angie, Angie PRO |
Timeline
- Jun 5, 2024 CVE Published
- Dec 18, 2025 CVE Updated
References
- https://my.f5.com/manage/s/article/K000139627 url
- https://mailman.nginx.org/pipermail/nginx-announce/2024/GMY32CSHFH6VFTN76HJNX7WNEX4RLHF6.html url
- https://www.cybersecurity-help.cz/vdb/SB2024060431 url
- https://angie.software/angie/docs/oss_changes/#angie-1-8-2 url
- https://angie.software/angie/docs/pro_changes/#angie-pro-1-8-2 url
- https://nginx.org/en/security_advisories.html advisory