CVE-2015-8010
Fixed in a distro release EPSS 1%
Cross-site scripting (XSS) vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga before 1.14 allows remote attackers to inject arbitrary web script or HTML via the query string to cgi-bin/status.cgi.
Products: icinga, opensuse leap, opensuse_project leap
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Enterprise Storage 4 | icinga | 1.13.3-12.3.1 |
| SUSE Manager Client Tools 12 | icinga | 1.13.3-12.3.1 |
| Ubuntu 16.04 LTS | icinga | no fix |