漏洞描述
Nagios XI 5.7.5 contains a cross-site scripting vulnerability in the file /usr/local/nagiosxi/html/admin/sshterm.php, due to improper sanitization of user-controlled input. A maliciously crafted URL, when clicked by an admin user, can be used to steal session cookies, or it can be chained with the previous bugs to get one-click remote command execution on the Nagios XI server.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
github.comhttps://github.com/fs0c-sh/nagios-xi-5.7.5-bugs/blob/main/README.md#cve-2021-25299↗nagios.comhttp://nagios.com↗github.comhttps://github.com/fs0c-sh/nagios-xi-5.7.5-bugs/blob/main/README.md↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2021-25299↗assets.nagios.comhttps://assets.nagios.com/downloads/nagiosxi/versions.php↗