Description
An issue was discovered in Nagios XI 5.4.13. A registered user is able to use directory traversal to read local files, as demonstrated by URIs beginning with index.php?xiwindow=./ and config/?xiwindow=../ substrings.
Unscored
CVE-2018-10553
EUVD-2018-2625GHSA-v96c-c83h-m5pw
An issue was discovered in Nagios XI 5.4.13. A registered user is able to use directory traversal to read local files, as demonstrated by U…
Published Apr 30, 2018 · Updated Aug 5, 2024 · Assigned by mitre