CVE-2021-4285

LOW

Nagios NCPA < 2.4.0 - Cross-Site Scripting via Tail Template Name Parameter

Title source: llm
STIX 2.1

Description

A vulnerability classified as problematic was found in Nagios NCPA. This vulnerability affects unknown code of the file agent/listener/templates/tail.html. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 2.4.0 is able to address this issue. The name of the patch is 5abbcd7aa26e0fc815e6b2b0ffe1c15ef3e8fab5. It is recommended to upgrade the affected component. VDB-216874 is the identifier assigned to this vulnerability.

References (5)

Core 5
Core References
Third Party Advisory vdb-entry technical-description
https://vuldb.com/?id.216874
Third Party Advisory signature permissions-required
https://vuldb.com/?ctiid.216874
Patch, Third Party Advisory issue-tracking
https://github.com/NagiosEnterprises/ncpa/pull/834
Release Notes, Third Party Advisory patch
https://github.com/NagiosEnterprises/ncpa/releases/tag/v2.4.0

Scores

CVSS v3 3.5
EPSS 0.0625
EPSS Percentile 91.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Details

CWE
CWE-79
Status published
Products (1)
nagios/nagios_cross_platform_agent < 2.4.0
Published Dec 27, 2022
Tracked Since Feb 18, 2026