roxy-wi.

Roxy-WI: Path-traversal patch in commit d4d10006 is a no-op (tuple-membership bug)

• roxy-wi
• Path traversal
• CWE-697

Roxy-WI: Authentication bypass via 'api' substring in URL + unauthenticated /api/gpt

• roxy-wi
• Authentication bypass
• CWE-697

Roxy-WI: Open redirect on /login?next= via basic-auth userinfo syntax bypass

• roxy-wi
• Open redirect

Roxy-WI: EscapedString validator skips its '..' block when stripping (root cause for several path-traversal/RCE vectors)

• roxy-wi
• Path traversal
• Other injection

Roxy-WI: Authenticated RCE via 'configver' URL parameter (os.system sink in /config/versions/.../save)

• roxy-wi
• Command injection

Roxy-WI: IDOR — any authenticated user can read another user's full action history

• roxy-wi
• Broken access control

Roxy-WI: SSRF in /smon/agent/<endpoint>/<server_ip> reachable to cloud metadata IPs

• roxy-wi
• Server-side request forgery (SSRF)

Roxy-WI: Stored XSS in log viewer (wrap_line/highlight_word produce unescaped HTML)

• roxy-wi
• Cross-site scripting (XSS)

Roxy-WI: LDAP injection in /user/ldap/<username> (admin-only)

• roxy-wi
• Other injection

Roxy-WI: Authenticated RCE on every managed HAProxy load balancer via `option` field config injection in section save

• roxy-wi
• Command injection
• Code injection

Roxy-WI: Authenticated arbitrary file write on every managed load balancer (and downstream RCE) via WAF rule save `config_file_name`

• roxy-wi
• Path traversal
• Command injection

Roxy-WI: IDOR on PUT /smon/check — any user can rewrite any tenant's monitoring URL/IP/body

• roxy-wi
• Broken access control

Roxy-WI: Authorization bypass on POST /smon/agent/action/<action> — guest can stop or restart smon-agent on any host

• roxy-wi
• Broken access control

Roxy-WI: Cross-tenant authorization bypass on /install/* — guest can run Ansible / SSH on every registered server

• roxy-wi
• Broken access control

Roxy-WI Vulnerable to Authenticated Remote Code Execution via OS Command Injection in find-in-config Endpoint

• roxy-wi
• Command injection

Roxy-WI has SQL Injection in haproxy_section_save Endpoint via Unsanitized server_ip Parameter

• roxy-wi
• SQL injection

Roxy-WI has an arbitrary file read vulnerability

• roxy-wi
• Path traversal

Roxy-WI vulnerable to path traversal and arbitrary file writing

• roxy-wi
• Path traversal

Roxy-WI has Pre-Authentication LDAP Injection that Leads to Authentication Bypass

• roxy-wi
• Authentication bypass

Roxy-WI Vulnerable to Authenticated Arbitrary File Read via Path Traversal in Config Version Viewer

• roxy-wi
• Path traversal

Roxy-WI has a Command Injection via diff parameter in config comparison allows authenticated RCE

• roxy-wi
• Command injection

Roxy-WI has a Command Injection via grep parameter in logs.py allows authenticated RCE

• roxy-wi
• Command injection

Roxy-WI roxy.py action_service os command injection

• Roxy-WI
• Command injection

OS Command Injection via Port Scan Functionality in Roxy-WI

• roxy-wi
• Command injection