PT-2021-21973 · Nagios Xi · Nagios Xi

CVE-2021-38156

Published

2021-09-15

Updated

2021-09-27

CVSS v3.1

5.4

Medium

Vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Nagios XI versions prior to 5.8.6

Description: The issue exists in the dashboard page (/dashboards/#) when administrative users attempt to edit a dashboard, allowing for XSS.

Recommendations: For versions prior to 5.8.6, update to version 5.8.6 or later to resolve the issue.

Exploit

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2021-38156

Nagios Xi