Nagios XI before version 5.8.5 is vulnerable to local file inclusion through improper limitation of a pathname in index.php.
mitre·CWE-552·Published 2021-08-13