CVE-2021-3277

Nagios XI 5.7.5 and earlier allows authenticated admins to upload arbitrary files due to improper validation of the rename functionality in custom-includes component, which leads to remote code execution by uploading php files.

Nagios XI 5.7.5 and earlier allows authenticated admins to upload arbitrary files due to improper validation of the rename functionality in custom-includes component, which leads to remote code execution by uploading php files.

Nagios XI versiones 5.7.5 y anteriores, permiten a administradores autenticados subir archivos arbitrarios debido a la comprobación inapropiada de la funcionalidad rename en el componente custom-includes, lo que conlleva a una ejecución de código remota al subir archivos php