CVE-2020-28904

概要

参考情報

• packetstormsecurity.com/files/162783/Nagios-XI-Fusion-Privilege-Escalation-Cross-Site-Scripting-Code-Execution.html · Third Party Advisory
• skylightcyber.com/2021/05/20/13-nagios-vulnerabilities-7-will-shock-you · Exploit
• nagios.com/downloads/nagios-xi/change-log · Release Notes

fusion のその他の脆弱性

• CVE-2023-7312中 4.8Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability when adding or configuring Email Settings. U…
• CVE-2023-53690中 4.8Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability in the LDAP/AD authentication-server configu…
• CVE-2023-53689中 4.8Nagios Fusion versions prior to 4.2.0 contain a reflected cross-site scripting (XSS) vulnerability in the license key configuration flow tha…
• CVE-2018-25119中 6.1Nagios Fusion versions prior to 4.1.5 are vulnerable to cross-site scripting (XSS) via the "fusionwindow" parameter. Insufficient validation…
• CVE-2017-20209中 6.1Nagios Fusion versions prior to 4.0.1 are vulnerable to cross-site scripting (XSS) via the Users and Servers pages. Insufficient validation …