robeston

Security Issue: Basic Auth allows plaintext password submission over HTTPS when internal IP is allowed via Access List (satisfy any)

1

Description: I have identified a significant security flaw when using the Nginx Proxy Manager (NPM) in a Docker environment (specifically tested on OMV7) with both SSL/TLS enforcement and Access Lists...

Mixed Content Warning on Basic Authentication Page (HTTP instead of HTTPS)

1

Hello, A "Mixed Content" warning is experienced (indicated by a gray globe/info icon instead of a green padlock) on the built-in Nginx Proxy Manager Basic Authentication (Password Protection) page when...