CVE-2018-18250 - Icinga Web 2 before 2.6.2 allows parameters that break navigation dashlets, as demonstrated by a single '$' character as the Name of a Navigation item

Back Back to CVE browser

HIGH

Icinga Web 2 before 2.6.2 allows parameters that break navigation dashlets, as demonstrated by a single '$' character as the Name of a Navigation item

Published Dec 17, 2018

7.5

HIGH

CVSS 3.0

EPSS 1.00%

Description

Icinga Web 2 before 2.6.2 allows parameters that break navigation dashlets, as demonstrated by a single '$' character as the Name of a Navigation item.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-74

References (2)

http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00031.html
vendor-advisoryx_refsource_SUSE
https://herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180030.txt
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00031.html		vendor-advisoryx_refsource_SUSE
https://herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180030.txt		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 17, 2018

Updated Aug 5, 2024

Reserved Oct 11, 2018

Link CVE-2018-18250

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-18250

Red Hat

Severity n/a

Public date n/a

Links CVE-2018-18250