Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-54957

Nagios XI 2024R1.2.2 is vulnerable to an open redirect flaw on the Tools page, exploitable by users with read-only permissions. This vulnerability allows an attacker to craft a malicious link that redirects users to an arbitrary external URL without their consent.

Published

2025-02-27T20:16:01.980

Last Modified

2025-07-07T17:49:10.313

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.1 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-601
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application nagios nagios_xi 2024 Yes
References