Skip to content
OpenAdvisories

Package · Alpine

icingaweb2

3 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 5.3

    Custom variable protection and blacklists can be circumvented

    Icinga Web 2 is an open source monitoring web interface, framework, and command-line interface. A vulnerability in which custom variables are exposed to unauthorized users exists between versions 2.0.0 and 2.8.2. Custom variables are user-defined keys and val…

  • Medium 5.3

    Possible path traversal by use of the `doc` module

    Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Between versions 2.3.0 and 2.8.2, the `doc` module of Icinga Web 2 allows to view documentation directly in the UI. It must be enabled manually by an administrator …