Security Advisory

CVE-2020-6586

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-03-16 15:30:57

Last updated 2024-08-04 09:11:04

Assigner mitre

State PUBLISHED

Description

Nagios Log Server 2.1.3 allows XSS by visiting /profile and entering a crafted name field that is mishandled on the /admin/users page. Any malicious user with limited access can store an XSS payload in his Name. When any admin views this, the XSS is triggered.

← Browse all CVEs View on cve.org ↗