Nagvis before 1.9.34 was discovered to contain an arbitrary file read vulnerability via the component /core/classes/NagVisHoverUrl.php.
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:LNagvis
APPNagvis< 1.9.34
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Path Traversal
Referencje
Powiązane podatności
CVE-2024-47093HIGH8.8ten sam produkt
Improper neutralization of input in Nagvis before version 1.9.42 which can lead to XSS
CVE-2025-39665MEDIUM6.9ten sam produkt
User enumeration in Nagvis' Checkmk MultisiteAuth before version 1.9.48 allows an unauthenticated attacker to ...
CVE-2024-38866MEDIUM5.3ten sam produkt
Improper neutralization of input in Nagvis before version 1.9.47 which can lead to livestatus injection
CVE-2024-47090MEDIUM5.1ten sam produkt
Improper neutralization of input in Nagvis before version 1.9.47 which can lead to XSS
CVE-2023-46287MEDIUM6.1ten sam produkt
XSS exists in NagVis before 1.9.38 via the select function in share/server/core/functions/html.php.