TI-2024-15816 CVE-2024-23822
Thruk Incorrect limitation of a pathname to a restricted directory (Path Traversal) (CWE-22)
Priority HIGH 75
Thruk is a multibackend monitoring webinterface.
Vulnerabilities
5 records
Priority HIGH 73
Thruk is a multibackend monitoring webinterface which currently supports Naemon, Icinga, Shinken and Nagios as backends.
TI-2021-14228 CVE-2021-35490 · GHSA-3845-9fvj-j226
Thruk before 2.44 allows XSS for a quick command.
Priority LOW 25
Thruk before 2.44 allows XSS for a quick command.
TI-2021-14226 CVE-2021-35488 · GHSA-x3c7-xr54-mc7w
Thruk 2.40-2 allows /thruk/#cgi-bin/status.cgi?style=combined&title={TITLE] Reflected XSS…
Priority LOW 32
Thruk 2.40-2 allows /thruk/#cgi-bin/status.cgi?style=combined&title={TITLE] Reflected XSS via the host or title parameter.
TI-2021-14227 CVE-2021-35489 · GHSA-6642-wv2w-7c29
Thruk 2.40-2 allows…
Priority LOW 29
Thruk 2.40-2 allows /thruk/#cgi-bin/extinfo.cgi?type=2&host={HOSTNAME]&service={SERVICENAME]&backend={BACKEND] Reflected XSS via the host or service parameter.