CVE-2021-25299

Nagios XI version xi-5.7.5 is affected by cross-site scripting XSS. The vulnerability exists in the file /usr/local/nagiosxi/html/admin/sshterm.php due to improper sanitization of user-controlled input. A maliciously crafted URL, when clicked by an admin user, can be used to steal his/her session...

Nagios XI和Nagios 跨站脚本漏洞

Nagios XI is a commercial monitoring solution built on Nagios Core, including dashboards, web-based configuration, advanced reporting and rich data visualization. A cross-site scripting vulnerability exists in /usr/local/nagiosxi/html/admin/sshterm.php in Nagios XI 5.7.5. The vulnerability stems...

CVE-2021-25299: Improper Neutralization of Input During Web Page Generation

Nagios XI version xi-5.7.5 is affected by cross-site scripting XSS. The vulnerability exists in the file /usr/local/nagiosxi/html/admin/sshterm.php due to improper sanitization of user-controlled input. A maliciously crafted URL, when clicked by an admin user, can be used to steal his/her session...

PT-2021-16508

Name of the Vulnerable Software and Affected Versions: Nagios XI version xi-5.7.5 Description: The issue exists due to improper sanitization of user-controlled input in the file /usr/local/nagiosxi/html/admin/sshterm.php. This can be exploited by a maliciously crafted URL, which when clicked by a...