Cross Site Scripting vulnerability in Nagios Log Server v.2024R1.3.1 allows a remote attacker to execute arbitrary code via a payload into the Email field.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://www.exploit-db.com/exploits/52117 | Exploit Third Party Advisory |
| https://www.nagios.com/changelog/#log-server | Release Notes |
| https://youtu.be/MvJuIkdTSQg | Exploit |
Configurations
History
23 Apr 2025, 16:30
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Nagios
Nagios log Server |
|
| CPE | cpe:2.3:a:nagios:log_server:2024:r1.3.1:*:*:*:*:*:* | |
| References | () https://youtu.be/MvJuIkdTSQg - Exploit | |
| References | () https://www.exploit-db.com/exploits/52117 - Exploit, Third Party Advisory | |
| References | () https://www.nagios.com/changelog/#log-server - Release Notes |
15 Apr 2025, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-15 22:15
Updated : 2025-04-23 16:30
NVD link : CVE-2025-29471
Mitre link : CVE-2025-29471
JSON object : View
Products Affected
nagios
- log_server
CWE
No CWE.