Nagios XI Favorites CSRF

The vulnerability of the Favorites component in the Nagios XI monitoring tool relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute a CSRF attack remotely...

EUVD-2021-12848

Malware in sbrugna...

EUVD-2025-4459

Malicious code in bioql PyPI...

CVE-2024-54959

Nagios XI 2024R1.2.2 is vulnerable to a Cross-Site Request Forgery CSRF attack through the Favorites component, enabling POST-based Cross-Site Scripting XSS...

CVE-2021-26024

The Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to Insecure Direct Object Reference: it is possible to create favorites for any other user account...

CVE-2021-26024

The Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to Insecure Direct Object Reference: it is possible to create favorites for any other user account...

CVE-2021-26023

The Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to XSS...

CVE-2021-26023

The Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to XSS...

CVE-2021-26023

The Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to XSS...

CVE-2021-26024

The Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to Insecure Direct Object Reference: it is possible to create favorites for any other user account...

Cross site scripting

The Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to XSS...

CVE-2021-26023

The CVE-2021-26023 entry concerns Nagios XI 5.8.0 where the Favorites component is vulnerable to cross-site scripting (XSS) in versions before 1.0.2. Multiple sources (NVD, Red Hat, CNVD, PRION, CVE lists) confirm an XSS flaw that could allow execution of client-side code. Root cause is a vulnera...

CVE-2021-26023

The Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to XSS...

Nagios XI and Nagios Cross-site Scripting Vulnerabilities

Nagios XI is a commercial monitoring solution built on Nagios Core, including dashboards, web-based configuration, advanced reporting and rich data visualization. A cross-site scripting vulnerability exists in Nagios XI 5.8.0 in the Favorites component prior to version 1.0.2. An attacker could...