← All advisories

Unrated severityOSV Advisory· Published Dec 17, 2018· Updated Aug 5, 2024

CVE-2018-18247

CVE-2018-18247

Description

Icinga Web 2 before 2.6.2 has XSS via the /icingaweb2/navigation/add icon parameter.

Affected products

7

Icinga/Icingaweb2OSV
Range: v1.0-11, v2.0.0, v2.0.0-beta1, …
Icinga/Icinga DB Webllm-fuzzy
Range: <2.6.2
osv-coords5 versions
pkg:rpm/opensuse/icingaweb2&distro=openSUSE%20Leap%2015.0 pkg:rpm/opensuse/icingaweb2&distro=openSUSE%20Leap%2015.1 pkg:rpm/suse/icingaweb2&distro=SUSE%20Package%20Hub%2012 pkg:rpm/suse/icingaweb2&distro=SUSE%20Package%20Hub%2015 pkg:rpm/suse/icingaweb2&distro=SUSE%20Package%20Hub%2015%20SP1
< 2.7.3-bp151.5.3.1+ 4 more
- (no CPE)range: < 2.7.3-bp151.5.3.1
- (no CPE)range: < 2.7.3-bp151.5.3.1
- (no CPE)range: < 2.7.3-bp151.5.3.1
- (no CPE)range: < 2.7.3-bp151.5.3.1
- (no CPE)range: < 2.7.3-bp151.5.3.1

Patches

Vulnerability mechanics

References

2

lists.opensuse.org/opensuse-security-announce/2020-01/msg00031.htmlmitrevendor-advisoryx_refsource_SUSE
herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180029.txtmitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.