Five NGINX CVEs are conditional. Here is how to measure the conditions, not just the version

NGINX 1.31.7 and 1.30.6 fix five defects, and every one of them requires a particular directive to be active. For an exposure assessment, that is a gift: the vulnerable population is defined by configuration, and configuration questions can be answered more precisely than version questions.

ZoomEye queries for this article did not run to completion. The API returned HTTP 502 for the duration of the research window, so no counts appear below. The query designs and their limits are reproducible, and the reasoning stands independently of whether a particular day's scan succeeds.

What a scan can and cannot see about NGINX

app="nginx" returns assets ZoomEye has fingerprinted as running NGINX. http.header.server="nginx" returns assets whose Server response header contains that value.…