CVE-2018-18250

Опубликовано: 17 дек. 2018

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

Icinga Web 2 before 2.6.2 allows parameters that break navigation dashlets, as demonstrated by a single '$' character as the Name of a Navigation item.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00031.html
https://herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180030.txt
Exploit
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00031.html
https://herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180030.txt
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:icinga:icinga_web_2:*:*:*:*:*:*:*:*

Версия до 2.6.2 (исключая)

EPSS

Процентиль: 47%

0.00238

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-74

Связанные уязвимости

CVE-2018-18250

CVSS3: 7.5

ubuntu

около 7 лет назад

Icinga Web 2 before 2.6.2 allows parameters that break navigation dashlets, as demonstrated by a single '$' character as the Name of a Navigation item.

CVE-2018-18250

CVSS3: 7.5

debian

около 7 лет назад

Icinga Web 2 before 2.6.2 allows parameters that break navigation dash ...

GHSA-64hj-h2vf-7vhp

CVSS3: 7.5

github

больше 3 лет назад

Icinga Web 2 before 2.6.2 allows parameters that break navigation dashlets, as demonstrated by a single '$' character as the Name of a Navigation item.

openSUSE-SU-2020:0067-1

suse-cvrf

около 6 лет назад

Security update for icingaweb2

EPSS

Процентиль: 47%

0.00238

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-74