5 matches found
CVE-2025-67255
In NagiosXI 2026R1.0.1 build 1762361101, Dashboard parameters lack proper filtering, allowing any authenticated user to exploit a SQL Injection vulnerability...
CVE-2025-67255
creationtimestamp| type| source ---|---|--- 2025-12-29 18:25:48+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115804258174466152...
CVE-2025-67255
In NagiosXI 2026R1.0.1 build 1762361101, Dashboard parameters lack proper filtering, allowing any authenticated user to exploit a SQL Injection vulnerability...
CVE-2025-67255
CVE-2025-67255 affects NagiosXI 2026R1.0.1 build 1762361101. The issue is due to dashboard parameters not being properly filtered, enabling an SQL Injection by any authenticated user. The CVSSv3.1 base score is 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, PRIVILEGES REQUIRED: LOW...
