Vulnerabilities

TI-2021-02327 CVE-2021-3325 · GHSA-3r2m-6v2h-6jqr

Monitorix 3.13.0 allows remote attackers to bypass Basic Authentication in a default…

MEDIUM 46

Monitorix 3.13.0 allows remote attackers to bypass Basic Authentication in a default installation (i.e., an installation without a hosts_deny option).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02257 Published 2021-01-27 No fix listed

TI-2013-05809 CVE-2013-7071 · GHSA-j56v-4324-49f7

Cross-site scripting (XSS) vulnerability in the handle_request function in…

LOW 29

Cross-site scripting (XSS) vulnerability in the handle_request function in lib/HTTPServer.pm in Monitorix before 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01106 Published 2019-12-31 No fix listed CWE-79

TI-2013-05808 CVE-2013-7070 · GHSA-jfp6-jxr9-v5w6

The handle_request function in lib/HTTPServer.pm in Monitorix before 3.3.1 allows remote…

MEDIUM 49

The handle_request function in lib/HTTPServer.pm in Monitorix before 3.3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the URI.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0409 Published 2019-12-31 No fix listed CWE-74

TI-2018-05511 CVE-2018-7649 · GHSA-q56m-58hq-cwx7

Monitorix before 3.10.1 allows XSS via CGI variables.

LOW 28

Monitorix before 3.10.1 allows XSS via CGI variables.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00647 Published 2018-08-02 No fix listed CWE-79

Vulnerabilities

Filters

Monitorix 3.13.0 allows remote attackers to bypass Basic Authentication in a default…

Cross-site scripting (XSS) vulnerability in the handle_request function in…

The handle_request function in lib/HTTPServer.pm in Monitorix before 3.3.1 allows remote…

Monitorix before 3.10.1 allows XSS via CGI variables.