Stored Cross-Site Scripting Vulnerability in Nagios XI by Nagios Enterprises
CVE-2024-54958

6.1MEDIUM

Key Information:

Vendor

Nagios Enterprises

Status
Nagios XI
Vendor
CVE Published:
20 February 2025

What is CVE-2024-54958?

Nagios XI 2024R1.2.2 contains a stored Cross-Site Scripting (XSS) vulnerability in the Tools page. This flaw permits an attacker to embed malicious scripts that are subsequently stored and executed when other users access the Tools interface, potentially leading to session hijacking or other unauthorized actions. It is crucial for users of Nagios XI to apply necessary security measures to mitigate the risks associated with this vulnerability.

References

https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2024-54958

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.