CVE-2014-4329

Name of the Vulnerable Software and Affected Versions ntopng version 1.1

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the host parameter in the lua/host details.lua file. This could potentially lead to unauthorized actions on the affected system.

Recommendations For ntopng version 1.1, consider restricting access to the lua/host details.lua file until a patch is available. As a temporary workaround, avoid using the host parameter in the affected API endpoint until the issue is resolved.