This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2020-24368 →
DEBIAN-CVE-2020-24368
Icinga Icinga Web2 2.0.0 through 2.6.4, 2.7.4 and 2.8.2 has a Directory Traversal vulnerability which allows an attacker to access arbitrary files tha...
Original description
The description as published by the source.
Icinga Icinga Web2 2.0.0 through 2.6.4, 2.7.4 and 2.8.2 has a Directory Traversal vulnerability which allows an attacker to access arbitrary files that are readable by the process running Icinga Web 2. This issue is fixed in Icinga Web 2 in v2.6.4, v2.7.4 and v2.8.2.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
icingaweb2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-1"}]}]
Debian:13
icingaweb2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-1"}]}]
Debian:14
icingaweb2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-1"}]}]
References
- advisory security-tracker.debian.org