CVE-2024-47093

Description

References

• NagVis/nagvis commit 30e71e8 · Patch
• NagVis/nagvis commit b5b1164 · Patch
• nagvis.org/downloads/changelog/1.9.42 · Release Notes
• lists.debian.org/debian-lts-announce/2025/05/msg00000.html

nagvis 的其他漏洞

• CVE-2025-39665中危 5.3User enumeration in Nagvis' Checkmk MultisiteAuth before version 1.9.48 allows an unauthenticated attacker to enumerate Checkmk usernames.
• CVE-2024-47090中危 6.1Improper neutralization of input in Nagvis before version 1.9.47 which can lead to XSS
• CVE-2024-38866高危 7.5Improper neutralization of input in Nagvis before version 1.9.47 which can lead to livestatus injection
• CVE-2023-46287中危 6.1XSS exists in NagVis before 1.9.38 via the select function in share/server/core/functions/html.php.
• CVE-2022-46945中危 6.5Nagvis before 1.9.34 was discovered to contain an arbitrary file read vulnerability via the component /core/classes/NagVisHoverUrl.php.