Количество 3
Количество 3
CVE-2023-7321
Nagios Log Server versions prior to 2.1.14 are vulnerable to cross-site scripting (XSS) via the Snapshots Page. Untrusted log content was not safely encoded for the output context, allowing attacker-controlled data present in logs to execute script in the victim’s browser within the application origin.
GHSA-w8rr-5362-h9xq
Nagios Log Server versions prior to 2.1.14 are vulnerable to cross-site scripting (XSS) via the Snapshots Page. Untrusted log content was not safely encoded for the output context, allowing attacker-controlled data present in logs to execute script in the victim’s browser within the application origin.
BDU:2026-00272
Уязвимость модуля Snapshots (Снимки) программного средства мониторинга и анализа логов Nagios Log Server, позволяющая нарушителю проводить межсайтовые сценарные атаки
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-7321 Nagios Log Server versions prior to 2.1.14 are vulnerable to cross-site scripting (XSS) via the Snapshots Page. Untrusted log content was not safely encoded for the output context, allowing attacker-controlled data present in logs to execute script in the victim’s browser within the application origin. | CVSS3: 5.4 | 0% Низкий | 10 месяцев назад |
| GHSA-w8rr-5362-h9xq Nagios Log Server versions prior to 2.1.14 are vulnerable to cross-site scripting (XSS) via the Snapshots Page. Untrusted log content was not safely encoded for the output context, allowing attacker-controlled data present in logs to execute script in the victim’s browser within the application origin. | CVSS3: 5.4 | 0% Низкий | 10 месяцев назад |
 | BDU:2026-00272 Уязвимость модуля Snapshots (Снимки) программного средства мониторинга и анализа логов Nagios Log Server, позволяющая нарушителю проводить межсайтовые сценарные атаки | CVSS3: 5.4 | 0% Низкий | больше 3 лет назад |
Уязвимостей на страницу