Nagios Network Analyzer < 2024R1 Source Groups / Percentile Calculator Menu Stored XSS

Nagios Network Analyzer versions prior to 2024R1 contain a stored cross-site scripting (XSS) vulnerability in the Source Groups page (percentile calculator menu). An attacker can supply a malicious payload which is stored by the application and later rendered in the context of other users. When a victim views the affected page the injected script executes in the victim's browser context.

N/A

在Web页面生成时对输入的转义处理不恰当(跨站脚本)

Nagios Network Analyzer 安全漏洞

Nagios Network Analyzer是Nagios公司的一款用于监控和分析网络流量的企业级解决方案。 Nagios Network Analyzer 2024R1之前版本存在安全漏洞，该漏洞源于Source Groups页面存储型跨站脚本漏洞，可能导致恶意脚本在其他用户浏览器环境中执行。

N/A

N/A