High WID-SEC-2024-0411 1 CVE

Icinga: Schwachstelle ermöglicht Cross-Site Scripting

Published Feb 18, 2024 · Updated Feb 18, 2024 · de-DE

Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Icinga ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Icinga ist ein Monitoring System.

Vulnerabilities 1

High 8.3

CVE-2024-24820

Icinga Director configuration is susceptible to Cross-Site Request Forgery

Icinga Director is a tool designed to make Icinga 2 configuration handling easy. Not any of Icinga Director's configuration forms used to manipulate the monitoring environment are protected against cross site request forgery (CSRF). It enables attackers to pe…

Icinga icingaweb2-module-director icingaweb2-module-director icingaweb2-module-director Debian Ubuntu

Feb 9, 2024

Revision history

2024-02-18 #1
Initiale Fassung

References

GitHub Icinga vom 2024-02-18
https://github.com/Icinga/icingaweb2-module-director/security/advisories/GHSA-3mwp-5p5v-j6q3