PT-2019-13227

Name of the Vulnerable Software and Affected Versions Xymon versions prior to 4.3.29 Description A buffer overflow issue exists in the csvinfo CGI script. This can be exploited by sending a crafted GET request to the "/cgi-bin/csvinfo" API endpoint, which triggers an sprintf of the srcdb paramete...