Lucene search

Favorites Security Vulnerabilities - February

cve

CVE-2021-26023

The Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to XSS.

6.1CVSS

6.2AI Score

0.004EPSS

2021-02-03 10:15 PM

cve

CVE-2021-26024

The Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to Insecure Direct Object Reference: it is possible to create favorites for any other user account.

5.3CVSS

5.3AI Score

0.002EPSS

2021-02-03 10:15 PM