CVE-2024-3738 | cym1102 nginxWebUI up to 3.9.9 /adminPage/conf/saveCmd handlePath nginxPath certificate validation

A vulnerability classified as critical has been found in cym1102 nginxWebUI up to 3.9.9. This affects the function handlePath of the file /adminPage/conf/saveCmd. The manipulation of the argument nginxPath leads to improper certificate validation.

This vulnerability is uniquely identified as CVE-2024-3738. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.