Beveiligingsadvies

CVE-2020-6586

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-03-16 15:30:57

Laatst bijgewerkt 2024-08-04 09:11:04

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Nagios Log Server 2.1.3 allows XSS by visiting /profile and entering a crafted name field that is mishandled on the /admin/users page. Any malicious user with limited access can store an XSS payload in his Name. When any admin views this, the XSS is triggered.

← Alle CVE's bekijken Bekijk op cve.org ↗