CVE-2021-35478: XSS
Published Jul 27, 2021
·Updated
Nagios Log Server before 2.1.9 contains Reflected XSS in the dropdown box for the alert history and audit log function. All parameters used for filtering are affected. This affects users who open a crafted link or third-party web page.
Affected Software
1 affected component
Nagios Log Server<2.1.9
Event History
Jul 27, 2021
CVE Published
via MITRE·11:44 AM
Data Sourced
via MITRE·11:44 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2021-35478.
2
What is the severity of CVE-2021-35478?
The severity of CVE-2021-35478 is medium with a CVSS score of 5.4.
3
What is the affected software?
The affected software is Nagios Log Server version up to and excluding 2.1.9.
4
What is the CWE ID for CVE-2021-35478?
The CWE ID for CVE-2021-35478 is CWE-79.
5
How does CVE-2021-35478 impact users?
CVE-2021-35478 allows attackers to perform reflected XSS attacks by tricking users into opening a crafted link or visiting a third-party web page.