Unrated

Icinga Web 2 has XSS via the /icingaweb2/monitoring/list/services dir parameter, the /icingaweb2/user/list query string, the /icingaweb2/monitoring/ti...

CVE-2018-18248 First seen on SecPulse Dec 18, 2018

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2018-18248 icingaweb2 Fixed in: 2.6.2-1
Ubuntu UBUNTU-CVE-2018-18248 icingaweb2

Original description The description as published by the source.

Icinga Web 2 has XSS via the /icingaweb2/monitoring/list/services dir parameter, the /icingaweb2/user/list query string, the /icingaweb2/monitoring/timeline query string, or the /icingaweb2/setup query string.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

report herolab.usd.de
web lists.opensuse.org

Key facts

Severity: Unrated
Published: Dec 18, 2018
First seen on SecPulse: Dec 18, 2018

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:49