ArianeBlow/NagiosXI-RCE-all-version-CVE-2021-40345

ArianeBlow/NagiosXI-RCE-all-version-CVE-2021-40345

GitHubGitHub
GitHubgithub.com
Releases0
RFI to RCE Nagios/NagiosXI exploitation
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2021-40345↗
7.2 HIGH9 HIGH

An issue was discovered in Nagios XI 5.8.5. In the Manage Dashlets section of the Admin panel, an administrator can upload ZIP files. A command injection (within the name of the first file in the archive) allows an attacker to execute system commands.