CNNVD-202510-4113 Information

CNNVD ID

CNNVD-202510-4113

CVE-2023-7321

  • CNNVD Published: 2025-10-30

Description (Chinese)

Nagios Log Server是美国Nagios公司的一套集中式日志管理、监控和分析软件。 Nagios Log Server 2.1.14之前版本存在安全漏洞,该漏洞源于快照页面未安全编码不受信任的日志内容,可能导致跨站脚本攻击。

Description (English)

Nagios Log Server is a centralized log management, monitoring and analysis software for the United States company Nagios. There was a security loophole in the earlier version of Nagios Log Server 2.1.14, which originated from unsecured log content on the snapshot page, which could lead to cross-site script attacks.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Nagios

Published

2025-10-30

Last Modified

2026-02-24

References

https://www.nagios.com/changelog/nagios-log-server-2024r1/ https://www.vulncheck.com/advisories/nagios-log-server-xss-via-snapshots-page

Patch

https://www.nagios.com/products/security/#log-server

Share on: