CVE-2021-25299

MEDIUMNuclei

Nagios XI 5.7.5 - Cross-Site Scripting

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2021-25299 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

Nagios XI version xi-5.7.5 is affected by cross-site scripting (XSS). The vulnerability exists in the file /usr/local/nagiosxi/html/admin/sshterm.php due to improper sanitization of user-controlled input. A maliciously crafted URL, when clicked by an admin user, can be used to steal his/her session cookies or it can be chained with the previous bugs to get one-click remote command execution (RCE) on the Nagios XI server.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Nuclei templates

1
ProjectDiscoveryMEDIUMNagios XI 5.7.5 - Cross-Site ScriptingCVSS 6.1

Nagios XI 5.7.5 contains a cross-site scripting vulnerability in the file /usr/local/nagiosxi/html/admin/sshterm.php, due to improper sanitization of user-controlled input. A maliciously crafted URL, when clicked by an admin user, can be used to steal session cookies, or it can be chained with the previous bugs to get one-click remote command execution on the Nagios XI server.

Impact

Attackers can craft malicious URLs containing JavaScript that executes when clicked by admin users, potentially stealing session cookies that can be chained with other vulnerabilities for one-click remote command execution and complete Nagios XI server compromise.

Remediation

Upgrade Nagios XI to the latest version or apply the provided patch to fix the XSS vulnerability.

WeaknessesCWE-79
Authorsritikchaddha
Template tagscve2021cvenagiosnagiosxixssauthenticatedvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:nagios:nagios_xi:5.7.5:*:*:*:*:*:*:*
Shodan: title:"Nagios XI"
Shodan: http.title:"nagios xi"
FOFA: title="nagios xi"
FOFA: app="nagios-xi"
Google: intitle:"nagios xi"
https://github.com/fs0c-sh/nagios-xi-5.7.5-bugs/blob/main/README.md#cve-2021-25299 http://nagios.com/ https://github.com/fs0c-sh/nagios-xi-5.7.5-bugs/blob/main/README.md https://nvd.nist.gov/vuln/detail/CVE-2021-25299 https://assets.nagios.com/downloads/nagiosxi/versions.php

Source: ProjectDiscovery

References

5