medium6.5
CVE-2021-33178
The Manage Backgrounds functionality within NagVis versions prior to 1.9.29 is vulnerable to an authenticated path traversal vulnerability.
Impact
The Manage Backgrounds functionality within NagVis versions prior to 1.9.29 is vulnerable to an authenticated path traversal vulnerability. Exploitation of this results in a malicious actor having the ability to arbitrarily delete files on the local system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nagvis | Nagvis | before 1.9.29 |
Weakness classification
References
- NVD record
- CVE.org record
- https://nagvis.org/downloads/changelog/1.9.29
- https://www.synopsys.com/blogs/software-security/cyrc-advisory-nagios-xi
- https://lists.debian.org/debian-lts-announce/2025/05/msg00000.html
- https://nagvis.org/downloads/changelog/1.9.29
- https://www.synopsys.com/blogs/software-security/cyrc-advisory-nagios-xi