Thruk Thruk
5 CVEs affecting Thruk Thruk. Latest disclosed: 2024-01-29. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-34096 | Medium | 6.5 | 2023-06-08 | Thruk is a multibackend monitoring webinterface which currently supports Naemon, Icinga, Shinken and Nagios as backends. In versions 3.06 and prior, the file `… |
CVE-2021-35489 | Medium | 6.1 | 2021-11-09 | Thruk 2.40-2 allows /thruk/#cgi-bin/extinfo.cgi?type=2&host={HOSTNAME]&service={SERVICENAME]&backend={BACKEND] Reflected XSS via the host or service parameter… |
CVE-2021-35488 | Medium | 6.1 | 2021-11-09 | Thruk 2.40-2 allows /thruk/#cgi-bin/status.cgi?style=combined&title={TITLE] Reflected XSS via the host or title parameter. An attacker could inject arbitrary J… |
CVE-2024-23822 | Medium | 5.4 | 2024-01-29 | Thruk is a multibackend monitoring webinterface. Prior to 3.12, the Thruk web monitoring application presents a vulnerability in a file upload form that allow… |
CVE-2021-35490 | Medium | 5.4 | 2021-12-15 | Thruk before 2.44 allows XSS for a quick command. |