EmreOvunc/Nagios-XI-Reflected-XSS

EmreOvunc/Nagios-XI-Reflected-XSS

GitHubGitHub
GitHubgithub.com
Releases0
Stars1
A reflected cross-site scripting (XSS) in Nagios XI 5.7.1 can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2020-23992↗
6.1 MEDIUM—

Cross Site Scripting (XSS) in Nagios XI 5.7.1 allows remote attackers to run arbitrary code via returnUrl parameter in a crafted GET request.