Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-1616

osim: Path Traversal via query parameters in Nginx configuration

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat-cnalr

Description

The $uri$args concatenation in nginx configuration file present in Open Security Issue Management (OSIM) prior v2025.9.0 allows path traversal attacks via query parameters.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat osim

Default version status: unaffected

  • 0 to < v2025.9.0affected

References