Nagios Log Server Cross-Site Scripting Vulnerability in User Creation Function

A cross-site scripting (XSS) vulnerability has been identified in Nagios Log Server versions prior to 2024R1. This issue arises in the Create User function, where inadequate validation or escaping of user input allows for the injection and execution of arbitrary scripts in the context of the user's browser.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the victim's browser.

Remediation

Users can upgrade to Nagios Log Server version 2024R1 or later to address this vulnerability.