CVE-2020-35269

EUVD-2020-22947
Nagios Core application version 4.2.4 is vulnerable to Site-Wide Cross-Site Request Forgery (CSRF) in many functions, like adding – deleting for hosts or servers.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 81%
Affected Products (NVD)
VendorProductVersion
nagiosnagios_core
4.2.4
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
nagios4
bookworm
unimportant
bullseye
unimportant
sid
unimportant
trixie
unimportant
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
nagios4
bionic
dne
focal
needs-triage
groovy
ignored
hirsute
ignored
impish
ignored
jammy
needs-triage
kinetic
ignored
lunar
ignored
mantic
ignored
noble
needs-triage
trusty
dne
xenial
dne
Common Weakness Enumeration
References
https://gist.github.com/MoSalah20/d1d40b43eafba0bd22ee4cddecad3cbc
https://gist.github.com/MoSalah20/d1d40b43eafba0bd22ee4cddecad3cbc