← All advisories

Medium severity5.4OSV Advisory· Published Dec 17, 2018· Updated Jun 17, 2026

CVE-2018-18247

CVE-2018-18247

Description

Icinga Web 2 before 2.6.2 has XSS via the /icingaweb2/navigation/add icon parameter.

Affected products

8

Icinga/Icingaweb2OSV
Range: v1.0-11, v2.0.0, v2.0.0-beta1, …
Icinga/Icinga Web 2
cpe:2.3:a:icinga:icinga_web_2:*:*:*:*:*:*:*:*
Range: <2.6.2
Icinga/Icinga Db Webllm-fuzzy
Range: <2.6.2
osv-coords5 versions
pkg:rpm/opensuse/icingaweb2&distro=openSUSE%20Leap%2015.0 pkg:rpm/opensuse/icingaweb2&distro=openSUSE%20Leap%2015.1 pkg:rpm/suse/icingaweb2&distro=SUSE%20Package%20Hub%2012 pkg:rpm/suse/icingaweb2&distro=SUSE%20Package%20Hub%2015 pkg:rpm/suse/icingaweb2&distro=SUSE%20Package%20Hub%2015%20SP1
< 2.7.3-bp151.5.3.1+ 4 more
- (no CPE)range: < 2.7.3-bp151.5.3.1
- (no CPE)range: < 2.7.3-bp151.5.3.1
- (no CPE)range: < 2.7.3-bp151.5.3.1
- (no CPE)range: < 2.7.3-bp151.5.3.1
- (no CPE)range: < 2.7.3-bp151.5.3.1

Patches

Vulnerability mechanics

References

2

herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180029.txtnvdExploitThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2020-01/msg00031.htmlnvd

News mentions

0

No linked articles in our index yet.