CVE-2020-28908

Description

References

• packetstormsecurity.com/files/162783/Nagios-XI-Fusion-Privilege-Escalation-Cross-Site-Scripting-Code-Execution.html · Third Party Advisory
• skylightcyber.com/2021/05/20/13-nagios-vulnerabilities-7-will-shock-you · Exploit
• nagios.com/downloads/nagios-xi/change-log · Release Notes

fusion의 다른 취약점

• CVE-2023-7312보통 4.8Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability when adding or configuring Email Settings. U…
• CVE-2023-53690보통 4.8Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability in the LDAP/AD authentication-server configu…
• CVE-2023-53689보통 4.8Nagios Fusion versions prior to 4.2.0 contain a reflected cross-site scripting (XSS) vulnerability in the license key configuration flow tha…
• CVE-2018-25119보통 6.1Nagios Fusion versions prior to 4.1.5 are vulnerable to cross-site scripting (XSS) via the "fusionwindow" parameter. Insufficient validation…
• CVE-2017-20209보통 6.1Nagios Fusion versions prior to 4.0.1 are vulnerable to cross-site scripting (XSS) via the Users and Servers pages. Insufficient validation …