Debian/nagios4: medium 5.4
Nagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as demonstrated by a SCRIPT element delivered by a modified check_load plugin to NRPE.
Action: Upgrade nagios4 to 4.3.4-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.3.4-3 | - |
Fixed versions
| 4.3.4-3 |
Sources
- osv: DEBIAN-CVE-2018-18245#Debian:14/nagios4
- https://security-tracker.debian.org/tracker/CVE-2018-18245
published · modified · JSON