{"action":"Upgrade nagios4 to 4.3.4-4 or later.","affected":[{"fixed":"4.3.4-4","introduced":"0"}],"component":"nagios4","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["4.3.4-4"],"id":"tcs_01M5NEKBJXJZK3Q01MX3X4FCP0","modified_at":"2026-10-26T12:02:26.083742526Z","published_at":"2020-06-09T14:15:10.063Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2020-13977","https://security-tracker.debian.org/tracker/CVE-2020-13977"],"severity":{"label":"medium","score":4.9},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2020-13977#Debian:13/nagios4","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2020-13977"}],"summary":"Nagios 4.4.5 allows an attacker, who already has administrative access to change the \"URL for JSON CGIs\" configuration setting, to modify the Alert Histogram and Trends code via crafted versions of th"}