CVE-2024-38866
Livestatus Injection in dynmaps
Summary
Livestatus Injection in dynmaps
Original description
The description as published by the source.
Improper neutralization of input in Nagvis before version 1.9.47 which can lead to livestatus injection
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2024-38866 nagvis Fixed in: 1:1.9.25-2+deb11u2
- Ubuntu UBUNTU-CVE-2024-38866 nagvis
References
- advisory github.com
- advisory nvd.nist.gov
- web github.com
- web lists.debian.org
- web nagvis.org