CVE-2024-38866

Mô tả

Tham khảo

• NagVis/nagvis#398 · Patch
• nagvis.org/downloads/changelog/1.9.47 · Release Notes
• lists.debian.org/debian-lts-announce/2025/06/msg00031.html

Lỗ hổng khác của nagvis

• CVE-2025-39665TRUNG BÌNH 5.3User enumeration in Nagvis' Checkmk MultisiteAuth before version 1.9.48 allows an unauthenticated attacker to enumerate Checkmk usernames.
• CVE-2024-47090TRUNG BÌNH 6.1Improper neutralization of input in Nagvis before version 1.9.47 which can lead to XSS
• CVE-2024-47093TRUNG BÌNH 6.1Improper neutralization of input in Nagvis before version 1.9.42 which can lead to XSS
• CVE-2023-46287TRUNG BÌNH 6.1XSS exists in NagVis before 1.9.38 via the select function in share/server/core/functions/html.php.
• CVE-2022-46945TRUNG BÌNH 6.5Nagvis before 1.9.34 was discovered to contain an arbitrary file read vulnerability via the component /core/classes/NagVisHoverUrl.php.