CVE-2018-18248

MEDIUM6.1

Icinga Web 2 has XSS via the /icingaweb2/monitoring/list/services dir parameter, the /icingaweb2/user/list query string, the /icingaweb2/monitoring/timeline query string, or the /icingaweb2/setup query string

Published Dec 17, 2018

Modified 1 years ago

Details

Icinga Web 2 has XSS via the /icingaweb2/monitoring/list/services dir parameter, the /icingaweb2/user/list query string, the /icingaweb2/monitoring/timeline query string, or the /icingaweb2/setup query string.

References

ADVISORY

http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00031.html

WEB

https://herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180028.txt

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2018-18248

CVSS Analysis

CVSS v3.0

6.1

Exploitability

Attack Vector