A vulnerability has been reported in the Naxsi module for Nginx, which can be exploited by malicious people to disclose sensitive information.

Certain unspecified input is not properly verified in naxsi-ui/ nx_extract.py before being used to read files. This can be exploited to disclose the contents of arbitrary files via directory traversal sequences.

The vulnerability is reported in versions prior to 0.46-1.

Solution
Update to version 0.46-1.

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://code.google.com/p/naxsi/source/detail?r=307

Deep Links
Links available to Secunia VIM customers