.. / CVE-2021-25299

• XSS
• Nuclei
• Web

Exploit for Nagios XI 5.7.5 - Cross-Site Scripting (CVE-2021-25299)

Description:

Nagios XI 5.7.5 contains a cross-site scripting vulnerability in the file /usr/local/nagiosxi/html/admin/sshterm.php, due to improper sanitization of user-controlled input. A maliciously crafted URL, when clicked by an admin user, can be used to steal session cookies, or it can be chained with the previous bugs to get one-click remote command execution on the Nagios XI server.

Nuclei Template

View the template here CVE-2021-25299.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-25299.yaml

References: