Nagios XI < 5.5.8 Multiple Vulnerabilities

Nagios XI is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nagios:nagiosxi"; if description...

CVE-2018-20172

Nagios XI before 5.5.8 is vulnerable to an XSS via an unfiltered rss_url parameter in rss_dashlet/magpierss/scripts/magpie_slashbox.php. Affects Nagios XI; root cause is lack of input filtering in the RSS URL handling. Impact is client-side script execution in a user’s browser if an attacker can ...