PT-2017-16517

Name of the Vulnerable Software and Affected Versions ntopng versions prior to 2.4 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users. This is demonstrated by exploitation of the following API endpoints: "admin/add user.lua"...

PT-2015-7776

Name of the Vulnerable Software and Affected Versions ntopng aka ntop versions prior to 2.2 Description The issue allows remote authenticated users to change the login context and gain privileges. This is achieved via the username parameter to the "admin/password reset.lua" endpoint...