Skip to content
OpenAdvisories

Vendor

sni

3 known vulnerabilities.

Products

Thruk 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2024-23822

    Thruk Incorrect limitation of a pathname to a restricted directory (Path Traversal) (CWE-22)

    Thruk is a multibackend monitoring webinterface. Prior to 3.12, the Thruk web monitoring application presents a vulnerability in a file upload form that allows a threat actor to arbitrarily upload files to the server to any path they desire and have permissio…

    sni Thruk
  • Medium 6.5
    CVE-2023-34096 Public exploit EPSS 63%

    Thruk has Path Traversal Vulnerability in panorama.pm

    Thruk is a multibackend monitoring webinterface which currently supports Naemon, Icinga, Shinken and Nagios as backends. In versions 3.06 and prior, the file `panorama.pm` is vulnerable to a Path Traversal vulnerability which allows an attacker to upload a fi…

    sni Thruk