TI-2024-15816 CVE-2024-23822
Thruk Incorrect limitation of a pathname to a restricted directory (Path Traversal) (CWE-22)
Priority HIGH 75
Thruk is a multibackend monitoring webinterface.
Thruk
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Thruk records in CISA KEVNo Thruk vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Thruk · all components
Priority HIGH 73
Thruk is a multibackend monitoring webinterface which currently supports Naemon, Icinga, Shinken and Nagios as backends.
TI-2021-14226 CVE-2021-35488 · GHSA-x3c7-xr54-mc7w
Thruk 2.40-2 allows /thruk/#cgi-bin/status.cgi?style=combined&title={TITLE] Reflected XSS…
Priority LOW 32
Thruk 2.40-2 allows /thruk/#cgi-bin/status.cgi?style=combined&title={TITLE] Reflected XSS via the host or title parameter.
TI-2021-14227 CVE-2021-35489 · GHSA-6642-wv2w-7c29
Thruk 2.40-2 allows…
Priority LOW 29
Thruk 2.40-2 allows /thruk/#cgi-bin/extinfo.cgi?type=2&host={HOSTNAME]&service={SERVICENAME]&backend={BACKEND] Reflected XSS via the host or service parameter.
TI-2021-14228 CVE-2021-35490 · GHSA-3845-9fvj-j226
Thruk before 2.44 allows XSS for a quick command.
Priority LOW 25
Thruk before 2.44 allows XSS for a quick command.