CVE-2020-35578

Name of the Vulnerable Software and Affected Versions: Nagios XI versions prior to 5.8.0

Description: An issue in the Manage Plugins page allows a remote, authenticated admin user to execute operating-system commands due to mishandling of the line-ending conversion feature during plugin upload.

Recommendations: For versions prior to 5.8.0, update to version 5.8.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the Manage Plugins page to minimize the risk of exploitation.