Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Nagios Fusion < 4.2.0 LDAP/AD Integration Stored XSS
Vulnerability Description
Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability in the LDAP/AD authentication-server configuration. Unsanitized user input can be stored and later rendered in the administrative UI, causing JavaScript to execute in the browser of any user who views the affected page. An attacker who can add authentication servers via LDAP/AD integration could persist a malicious payload that executes in the context of other users' browsers.
CVSS Information
N/A
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Nagios Fusion 安全漏洞
Vulnerability Description
Nagios Fusion是美国Nagios公司的一个集中监控与可视化平台。 Nagios Fusion 4.2.0之前版本存在安全漏洞，该漏洞源于LDAP/AD身份验证服务器配置中未清理用户输入，可能导致存储型跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A