CVE-2022-48253

CRITICAL 9.8CVE-2022-48253 · Published 11/01/2023 · updated 17/06/2026

In short

CVE-2022-48253 is a CRITICAL (CVSS 9.8) vulnerability affecting nostromo (nazgul).
Chance of exploitation in the next 30 days (EPSS): 3.4%, higher than 89.0% of all vulnerabilities.
Fix: update to 2.1 or later.

Package	Affected versions	Patched versions
nostromo nazgul	`< 2.1`	`2.1`

Description

nhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary commands on the remote server. The vulnerability occurs when the homedirs option is used.

References

nazgul.ch/dev/nostromo_cl.txt · Release Notes
soteritsecurity.com/blog/2023/01/nostromo_from_directory_traversal_to_RCE.html · Exploit

More vulnerabilities in nostromo

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free