Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-30164

Опубликовано: 26 мар. 2025
Источник: nvd
CVSS3: 4.1
CVSS3: 6.1
EPSS Низкий

Описание

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 vulnerability allows an attacker to craft a URL that, once visited by an authenticated user (or one that is able to authenticate), allows to manipulate the backend to redirect the user to any location. This issue has been resolved in versions 2.11.5 and 2.12.3 of Icinga Web 2. No known workarounds are available.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:icinga:icinga_web_2:*:*:*:*:*:*:*:*
Версия до 2.11.5 (исключая)
cpe:2.3:a:icinga:icinga_web_2:*:*:*:*:*:*:*:*
Версия от 2.12.0 (включая) до 2.12.3 (исключая)

EPSS

Процентиль: 17%
0.00259
Низкий

4.1 Medium

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-601

Связанные уязвимости

CVSS3: 4.1
ubuntu
больше 1 года назад

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 vulnerability allows an attacker to craft a URL that, once visited by an authenticated user (or one that is able to authenticate), allows to manipulate the backend to redirect the user to any location. This issue has been resolved in versions 2.11.5 and 2.12.3 of Icinga Web 2. No known workarounds are available.

CVSS3: 4.1
debian
больше 1 года назад

Icinga Web 2 is an open source monitoring web interface, framework and ...

EPSS

Процентиль: 17%
0.00259
Низкий

4.1 Medium

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-601