CVE-2018-10553

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 38.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-04-30 · updated 2026-06-17
Weakness: CWE-22

Description

An issue was discovered in Nagios XI 5.4.13. A registered user is able to use directory traversal to read local files, as demonstrated by URIs beginning with index.php?xiwindow=./ and config/?xiwindow=../ substrings.

Affected products

Nagios XI: 5.4.13

References

http://code610.blogspot.com/2018/04/few-bugs-in-latest-nagios-xi-5413.html
http://code610.blogspot.com/2018/04/few-bugs-in-latest-nagios-xi-5413.html

Get alerted when CVE-2018-10553 or the next vulnerability affects your stack