CVE-2024-54960

Summary

CVE-2024-54960 is a recently disclosed SQL Injection vulnerability affecting Nagios XI 2024R1.2.2. An attacker can exploit this flaw by sending a specially crafted payload to the History Tab component, allowing them to execute SQL queries and potentially gain unauthorized access to sensitive data. Successful exploitation could lead to data theft or even system compromise. Users running this version of Nagios XI are strongly advised to apply the available patch or upgrade to a newer, secure version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.