Threats tagged 'ghsa-fr8x-pm73-6f4h'

Nagios XI versions prior to 2024R1.3.2 contain a remote code execution vulnerability due to chaining an arbitrary file upload flaw with a path traversal issue in the Core Config Snapshots interface. This vulnerability allows attackers to upload malicious PHP files to a web-accessible directory, which are then executed with the privileges of the www-data user.