VYPR

Favorites

by Nagios

CVEs (2)

  • CVE-2021-26023MedFeb 3, 2021
    risk 0.42cvss 6.1epss 0.25

    The Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to XSS.

  • CVE-2021-26024MedFeb 3, 2021
    risk 0.36cvss 5.3epss 0.19

    The Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to Insecure Direct Object Reference: it is possible to create favorites for any other user account.