{"vulnerability": "CVE-2022-31125", "sightings": [{"uuid": "1039f729-6a2d-474d-a081-993d4dfafd13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-31125", "type": "exploited", "source": "https://www.exploit-db.com/exploits/51226", "content": "", "creation_timestamp": "2023-04-03T00:00:00.000000Z"}, {"uuid": "4bd6b6bc-e721-4e6d-9fee-797bb7fc842b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-31125", "type": "seen", "source": "https://t.me/cibsecurity/45693", "content": "\u203c CVE-2022-31125 \u203c\n\nRoxy-wi is an open source web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A vulnerability in Roxy-wi allows a remote, unauthenticated attacker to bypass authentication and access admin functionality by sending a specially crafted HTTP request. This affects Roxywi versions before 6.1.1.0. Users are advised to upgrade. There are no known workarounds for this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-06T22:14:32.000000Z"}]}