Nagios XI 2024R1.2.2 is vulnerable to an open redirect flaw on the Tools page, exploitable by users with read-only permissions. This vulnerability allows an attacker to craft a malicious link that redirects users to an arbitrary external URL without their consent.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2024-54957 | Third Party Advisory |
| https://www.nagios.com/products/security/ | Vendor Advisory |
Configurations
History
07 Jul 2025, 17:49
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Nagios
Nagios nagios Xi |
|
| CPE | cpe:2.3:a:nagios:nagios_xi:2024:r1.2.2:*:*:*:*:*:* | |
| References | () https://www.nagios.com/products/security/ - Vendor Advisory | |
| References | () https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2024-54957 - Third Party Advisory |
27 Feb 2025, 20:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-27 20:16
Updated : 2025-07-07 17:49
NVD link : CVE-2024-54957
Mitre link : CVE-2024-54957
JSON object : View
Products Affected
nagios
- nagios_xi
CWE
No CWE.