exploitDog

CVE-2021-38156

Опубликовано: 15 сент. 2021

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Высокий

Описание

In Nagios XI before 5.8.6, XSS exists in the dashboard page (/dashboards/#) when administrative users attempt to edit a dashboard.

Ссылки

https://raxis.com/blog/cve-2021-38156
Exploit
Third Party Advisory
https://www.nagios.com/downloads/nagios-xi/change-log/
Release Notes
Vendor Advisory
https://raxis.com/blog/cve-2021-38156
Exploit
Third Party Advisory
https://www.nagios.com/downloads/nagios-xi/change-log/
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*

Версия до 5.8.6 (исключая)

EPSS

Процентиль: 99%

0.86031

Высокий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-2cr4-q4vr-2q6r

github

около 3 лет назад

In Nagios XI before 5.8.6, XSS exists in the dashboard page (/dashboards/#) when administrative users attempt to edit a dashboard.

EPSS

Процентиль: 99%

0.86031

Высокий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79