CVE-2021-35478

 

Published at: - 30-07-2021 04:15

Last modified: - 10-02-2022 06:05

Total changes: - 3

Description

Nagios Log Server before 2.1.9 contains Reflected XSS in the dropdown box for the alert history and audit log function. All parameters used for filtering are affected. This affects users who open a crafted link or third-party web page.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

 

Verification logic

 

Reference

• https://research.nccgroup.com/2021/07/22/technical-advisory-stored-and-reflected-xss-vulnerability-in-nagios-log-server-cve-2021-35478cve-2021-35479/
• https://research.nccgroup.com/?research=Technical%20advisories
• https://www.nagios.com/downloads/nagios-log-server/change-log/

 

Keywords

NVD

 

CVE-2021-35478

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures