Description
Nagios XI 5.7.5 and earlier allows authenticated admins to upload arbitrary files due to improper validation of the rename functionality in custom-includes component, which leads to remote code execution by uploading php files.
Unscored
CVE-2021-3277
EUVD-2021-26615GHSA-xj6h-r3q8-7cmf
Nagios XI 5.7.5 and earlier allows authenticated admins to upload arbitrary files due to improper validation of the rename functionality in…
Published Jun 7, 2021 · Updated Aug 3, 2024 · Assigned by mitre