CVE-2011-1523

Опубликовано: 09 мар. 2011

Источник: redhat

CVSS2: 3.5

Описание

Cross-site scripting (XSS) vulnerability in statusmap.c in statusmap.cgi in Nagios 3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the layer parameter.

Отчет

This issue affects the Red Hat HPC Solution which is End of Life. For more information please refer to: https://access.redhat.com/support/policy/updates/hpc/

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat HPC Solution 1.2	nagios	Will not fix

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-79

https://bugzilla.redhat.com/show_bug.cgi?id=690877Nagios: XSS in the network status map CGI

3.5 Low

CVSS2

Связанные уязвимости

CVE-2011-1523

ubuntu

почти 15 лет назад

Cross-site scripting (XSS) vulnerability in statusmap.c in statusmap.cgi in Nagios 3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the layer parameter.

CVE-2011-1523

nvd

почти 15 лет назад

Cross-site scripting (XSS) vulnerability in statusmap.c in statusmap.cgi in Nagios 3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the layer parameter.

CVE-2011-1523

debian

почти 15 лет назад

Cross-site scripting (XSS) vulnerability in statusmap.c in statusmap.c ...

GHSA-6867-mm47-7j8j

github

больше 3 лет назад

Cross-site scripting (XSS) vulnerability in statusmap.c in statusmap.cgi in Nagios 3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the layer parameter.

3.5 Low

CVSS2