CVE-2024-47090

Description

References

• nagvis.org/downloads/changelog/1.9.47 · Release Notes
• lists.debian.org/debian-lts-announce/2025/06/msg00031.html

More vulnerabilities in nagvis

• CVE-2025-39665MEDIUM 5.3User enumeration in Nagvis' Checkmk MultisiteAuth before version 1.9.48 allows an unauthenticated attacker to enumerate Checkmk usernames.
• CVE-2024-38866HIGH 7.5Improper neutralization of input in Nagvis before version 1.9.47 which can lead to livestatus injection
• CVE-2024-47093MEDIUM 6.1Improper neutralization of input in Nagvis before version 1.9.42 which can lead to XSS
• CVE-2023-46287MEDIUM 6.1XSS exists in NagVis before 1.9.38 via the select function in share/server/core/functions/html.php.
• CVE-2022-46945MEDIUM 6.5Nagvis before 1.9.34 was discovered to contain an arbitrary file read vulnerability via the component /core/classes/NagVisHoverUrl.php.