Open Redirect Vulnerability in Nagios XI by Nagios
CVE-2023-24034

3.1LOW

Key Information:

Vendor

NagiOS

Status
NagiOS Xi
Vendor
CVE Published:
14 September 2026

What is CVE-2023-24034?

An open redirect vulnerability was identified in the twilio_ajax_handler.php file of Nagios XI versions prior to 5.9.3. This flaw enables an attacker to manipulate user navigation, potentially redirecting users to harmful external sites. It poses a significant risk as unsuspecting users may be misled into visiting malicious URLs, compromising their security.

Affected Version(s)

Nagios XI 0 < 5.9.3

References

https://www.nagios.com/downloads/nagios-xi/change-log/
https://www.nagios.com/security-disclosures/

CVSS V3.1

Score:
3.1
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.