CVE-2017-20209

Mô tả

Tham khảo

• nagios.com/changelog/nagios-fusion · Release Notes
• vulncheck.com/advisories/nagios-fusion-xss-via-users-servers-page · Third Party Advisory

Lỗ hổng khác của fusion

• CVE-2023-7312TRUNG BÌNH 4.8Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability when adding or configuring Email Settings. U…
• CVE-2023-53690TRUNG BÌNH 4.8Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability in the LDAP/AD authentication-server configu…
• CVE-2023-53689TRUNG BÌNH 4.8Nagios Fusion versions prior to 4.2.0 contain a reflected cross-site scripting (XSS) vulnerability in the license key configuration flow tha…
• CVE-2018-25119TRUNG BÌNH 6.1Nagios Fusion versions prior to 4.1.5 are vulnerable to cross-site scripting (XSS) via the "fusionwindow" parameter. Insufficient validation…
• CVE-2025-60425CAO 8.6Nagios Fusion v2024R1.2 and v2024R2 does not invalidate already existing session tokens when the two-factor authentication mechanism is enab…