Nagios XI SQL Injection Vulnerability in History Tab Component

A SQL injection vulnerability has been identified in Nagios XI version 2024R1.2.2. This vulnerability allows remote attackers to execute arbitrary SQL commands by injecting crafted payloads into the History Tab component. Exploitation of this vulnerability could lead to unauthorized access to the application's database, with potential consequences including data exposure, unauthorized modification, or a complete compromise of the application.

Impact

Exploitation of this vulnerability allows for SQL injection, enabling attackers to manipulate database queries. This could result in unauthorized data access, data modification, or a complete compromise of the application.

Remediation

Users are advised to update to the latest version of Nagios XI.