CVE-2013-4547
Fixed in a distro release EPSS 68%
nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI.
Products: f5 nginx, suse lifecycle_management_server, suse studio_onsite, suse webyast, opensuse
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | nginx | 1.4.4-1 |
| Debian 13 | nginx | 1.4.4-1 |
| Debian 14 | nginx | 1.4.4-1 |
| Debian 7 | nginx | 1.2.1-2.2+wheezy2 |
| openSUSE Tumbleweed | nginx | 1.11.4-2.5 |