Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2020-6585
Disclosure Date: March 16, 2020 (last updated February 21, 2025)
Nagios Log Server 2.1.3 has CSRF.
0
Attacker Value
Unknown
CVE-2020-6586
Disclosure Date: March 16, 2020 (last updated February 21, 2025)
Nagios Log Server 2.1.3 allows XSS by visiting /profile and entering a crafted name field that is mishandled on the /admin/users page. Any malicious user with limited access can store an XSS payload in his Name. When any admin views this, the XSS is triggered.
0
Attacker Value
Unknown
CVE-2020-6584
Disclosure Date: March 16, 2020 (last updated February 21, 2025)
Nagios Log Server 2.1.3 has Incorrect Access Control.
0
