A vulnerability classified as critical has been found in cym1102 nginxWebUI up to 3.9.9. This affects the function
handlePath
of the file /adminPage/conf/saveCmd. The manipulation of the argument nginxPath leads to improper certificate validation.
This vulnerability is uniquely identified as CVE-2024-3738. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.