Checkmk NagVis Reflected Cross-site Scripting

The "NagVis" component within Checkmk is vulnerable to reflected cross-site scripting. An attacker can craft a malicious link that will execute arbitrary JavaScript in the context of the browser once clicked. The attack can be performed on both authenticated and unauthenticated users.

N/A

在Web页面生成时对输入的转义处理不恰当(跨站脚本)

NagVis 安全漏洞

NagVis是NagVis开源的一个程序。用于以人性化的方式可视化您选择的监控核心数据。 NagVis存在安全漏洞，该漏洞源于容易受到跨站脚本攻击。

N/A

N/A