p PatchFirst

CVE-2018-18245

CVE-2018-18245

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Nagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as demonstrated by a SCRIPT element delivered by a modified check_load plugin to NRPE.

CVSS 5.4 · Medium · EPSS 2.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • nagios4 Debian:12

    Affected ranges
    • ECOSYSTEM: < 4.3.4-3

    Update to 4.3.4-3

  • nagios4 Debian:13

    Affected ranges
    • ECOSYSTEM: < 4.3.4-3

    Update to 4.3.4-3

  • nagios4 Debian:14

    Affected ranges
    • ECOSYSTEM: < 4.3.4-3

    Update to 4.3.4-3

  • nagios3 Ubuntu:16.04:LTS

    Versions
    • 3.5.1-1ubuntu4
    • 3.5.1.dfsg-2ubuntu1
    • 3.5.1.dfsg-2ubuntu2
    • 3.5.1.dfsg-2.1ubuntu1
    • 3.5.1.dfsg-2.1ubuntu1.1
    • 3.5.1.dfsg-2.1ubuntu1.2
    • 3.5.1.dfsg-2.1ubuntu1.3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nagios3 Ubuntu:18.04:LTS

    Versions
    • 3.5.1.dfsg-2.1ubuntu8
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →