Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-30164

Опубликовано: 26 мар. 2025
Источник: nvd
CVSS3: 4.1
CVSS3: 6.1
EPSS Низкий

Описание

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 vulnerability allows an attacker to craft a URL that, once visited by an authenticated user (or one that is able to authenticate), allows to manipulate the backend to redirect the user to any location. This issue has been resolved in versions 2.11.5 and 2.12.3 of Icinga Web 2. No known workarounds are available.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:icinga:icinga_web_2:*:*:*:*:*:*:*:*
Версия до 2.11.5 (исключая)
cpe:2.3:a:icinga:icinga_web_2:*:*:*:*:*:*:*:*
Версия от 2.12.0 (включая) до 2.12.3 (исключая)

EPSS

Процентиль: 23%
0.00079
Низкий

4.1 Medium

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-601

Связанные уязвимости

CVSS3: 4.1
ubuntu
11 месяцев назад

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 vulnerability allows an attacker to craft a URL that, once visited by an authenticated user (or one that is able to authenticate), allows to manipulate the backend to redirect the user to any location. This issue has been resolved in versions 2.11.5 and 2.12.3 of Icinga Web 2. No known workarounds are available.

CVSS3: 4.1
debian
11 месяцев назад

Icinga Web 2 is an open source monitoring web interface, framework and ...

EPSS

Процентиль: 23%
0.00079
Низкий

4.1 Medium

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-601