# Urgent security issue in NGINX/php-fpm

**URL:** <https://help.nextcloud.com/t/urgent-security-issue-in-nginx-php-fpm/62665>\
**Category:** 📰 News\
**Created:** [October 24, 2019, 2:05pm UTC](https://help.nextcloud.com/t/urgent-security-issue-in-nginx-php-fpm/62665 "2019-10-24T14:05:56Z")\
**Posts on this page:** 1\
**Showing post:** 17

<div class="post-metadata">

**Author:** ![foxdie](https://help.nextcloud.com/letter_avatar/foxdie/32/6_22734026db12803ebb3e059622ac3534.png) [@foxdie](https://help.nextcloud.com/u/foxdie)\
**Post date:** [October 25, 2019, 9:23am UTC](https://help.nextcloud.com/t/urgent-security-issue-in-nginx-php-fpm/62665/17 "2019-10-25T09:23:25Z")

</div>

WARNING to everybody with nginx version: nginx/1.10.3 (Debian stretch latest)

The directive or cgi\_parameter SCRIPTFILENAME will render your nextcloud website blank.  
change it to SCRIPT\_FILENAME

---

_[View the full topic](https://help.nextcloud.com/t/urgent-security-issue-in-nginx-php-fpm/62665)._