CVE-2020-16157: XSS
A Stored XSS vulnerability exists in Nagios Log Server before 2.1.7 via the Notification Methods -> Email Users menu.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-16157?
The severity of CVE-2020-16157 is medium with a CVSS score of 5.4.
How does the Stored XSS vulnerability in Nagios Log Server before 2.1.7 occur?
The Stored XSS vulnerability in Nagios Log Server before 2.1.7 occurs via the Notification Methods -> Email Users menu.
What software versions are affected by CVE-2020-16157?
Nagios Log Server versions up to but excluding 2.1.7 are affected by CVE-2020-16157.
Are there any public references available for CVE-2020-16157?
Yes, there are public references available for CVE-2020-16157. You can find them at the following links: http://packetstormsecurity.com/files/158992/Nagios-Log-Server-2.1.6-Cross-Site-Scripting.html, https://www.getastra.com/blog/911/stored-xss-vulnerability-nagios-log-server/, https://www.jinsonvarghese.com/stored-xss-vulnerability-in-nagios-log-server/
Is there a fix available for CVE-2020-16157?
Yes, to fix CVE-2020-16157, you need to update Nagios Log Server to version 2.1.7 or later.