CVE-2021-35490

Description

References

• gruppotim.it/redteam · Third Party Advisory
• thruk.org/changelog.html · Release Notes

Weitere Schwachstellen in thruk

• CVE-2024-23822KRITISCH 9.8Thruk is a multibackend monitoring webinterface. Prior to 3.12, the Thruk web monitoring application presents a vulnerability in a file upl…
• CVE-2023-34096HOCH 8.8Thruk is a multibackend monitoring webinterface which currently supports Naemon, Icinga, Shinken and Nagios as backends. In versions 3.06 an…
• CVE-2021-35489MITTEL 6.1Thruk 2.40-2 allows /thruk/#cgi-bin/extinfo.cgi?type=2&host={HOSTNAME]&service={SERVICENAME]&backend={BACKEND] Reflected XSS via the host or…
• CVE-2021-35488MITTEL 6.1Thruk 2.40-2 allows /thruk/#cgi-bin/status.cgi?style=combined&title={TITLE] Reflected XSS via the host or title parameter. An attacker could…