Medium · 6.1 CVE-2024-54959 EUVD-2025-4459GHSA-22ww-35pw-64c4

Nagios XI 2024R1.2.2 is vulnerable to a Cross-Site Request Forgery (CSRF) attack through the Favorites component, enabling POST-based Cross…

Published Feb 20, 2025 · Updated Feb 21, 2025 · Assigned by mitre

Description

Nagios XI 2024R1.2.2 is vulnerable to a Cross-Site Request Forgery (CSRF) attack through the Favorites component, enabling POST-based Cross-Site Scripting (XSS).

Advisories 1

WID-SEC-2025-0420 Nagios Enterprises Nagios XI: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 20, 2025

References

https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2024-54959