CVE-2021-43584
Medium
Description
DOM-based Cross Site Scripting (XSS vulnerability in 'Tail Event Logs' functionality in Nagios Nagios Cross-Platform Agent (NCPA) before 2.4.0 allows attackers to run arbitrary code via the name element when filtering for a log.
SeverityMedium
CVSS4.8
Exploit probability—
ProductNagios Cross Platform Agent
PublishedJan 24, 2024
First seenJan 24, 2024
Weakness typeCWE-79Cross-site scripting (XSS)
How to fix
Update
- nagios nagios_cross_platform_agent2.4.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nagios nagios_cross_platform_agent | v < 2.4.0 | 2.4.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.