CVE-2024-38866 | THREATINT

Description

Improper neutralization of input in Nagvis before version 1.9.47 which can lead to livestatus injection

PUBLISHED Reserved 2024-06-20 | Published 2025-05-27 | Updated 2025-11-03 | Assigner Checkmk

MEDIUM: 5.3CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:L

Default status

unaffected

1.9.0 (semver) before 1.9.47

affected

Download JSON