CVE-2020-35578

Publication date

2021-01-13 20:19:50

Family

mitre

State

PUBLISHED

Description

An issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0. Because the line-ending conversion feature is mishandled during a plugin upload, a remote, authenticated admin user can execute operating-system commands.