CVE-2021-35478

概要

参考情報

• research.nccgroup.com/2021/07/22/technical-advisory-stored-and-reflected-xss-vulnerability-in-nagios-log-server-cve-2021-35478cve-2021-35479 · Exploit
• research.nccgroup.com · Third Party Advisory
• nagios.com/downloads/nagios-log-server/change-log · Release Notes

log server のその他の脆弱性

• CVE-2025-34323高 7.8Nagios Log Server versions prior to 2026R1.0.1 are vulnerable to local privilege escalation due to a combination of sudo misconfiguration an…
• CVE-2025-34322高 7.2Nagios Log Server versions prior to 2026R1.0.1 contain an authenticated command injection vulnerability in the experimental 'Natural Languag…
• CVE-2025-34298高 8.8Nagios Log Server versions prior to 2024R1.3.2 contain a privilege escalation vulnerability in the account email-change workflow. A user cou…
• CVE-2025-34277緊急 9.8Nagios Log Server versions prior to 2024R1.3.1 contain a code injection vulnerability where malformed dashboard ID values are not properly v…
• CVE-2025-34274緊急 9.8Nagios Log Server versions prior to 2024R2.0.3 contain an execution with unnecessary privileges vulnerability as it runs its embedded Logsta…