Reflected Cross-Site Scripting Vulnerability in Nagios XI

CVE-2013-10071

What is CVE-2013-10071?

Nagios XI versions prior to 2012R1.6 are susceptible to a reflected cross-site scripting vulnerability found in the dashboard dashlet's AJAX load functionality. This security flaw arises from improper validation or escaping of user-supplied input. As a result, an attacker could potentially inject malicious scripts, which would subsequently execute within the browser environment of a victim, leading to various security risks, including unauthorized access to sensitive information.

References