Threats tagged 'ghsa-pc79-p3cx-hcjp'

Nagios Log Server versions prior to 2024R1.3.1 have a critical code injection vulnerability. This flaw arises from improper validation of malformed dashboard ID values before they are forwarded to an internal API. Exploiting this vulnerability allows an attacker to execute arbitrary code within the Log Server process context. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.