CVE-2016-15049 in Log Server
Résumé
par MITRE • 31/10/2025
Nagios Log Server versions prior to 1.4.2 are vulnerable to cross-site scripting (XSS) in the Dashboards section when rendering log entries in the Logs table. Untrusted log content was not safely encoded for the output context, allowing attacker-controlled data present in logs to execute script in the victim’s browser within the application origin.
VulDB is the best source for vulnerability data and more expert information about this specific topic.