critical9.8
CVE-2021-28925
SQL injection vulnerability in Nagios Network Analyzer before 2.4.3 via the o[col] parameter to api/checks/read/.
Impact
SQL injection vulnerability in Nagios Network Analyzer before 2.4.3 via the o[col] parameter to api/checks/read/.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nagios | Network Analyzer | before 2.4.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://medium.com/stolabs/issues-found-on-nagios-network-analyzer-2-4-2-50ec4ffb5e25
- https://www.nagios.com/downloads/nagios-network-analyzer/change-log/
- https://medium.com/stolabs/issues-found-on-nagios-network-analyzer-2-4-2-50ec4ffb5e25
- https://www.nagios.com/downloads/nagios-network-analyzer/change-log/