CVE-2025-30164
CVE-2025-30164
Título es
CVE-2025-30164
Mié, 26/03/2025 – 17:15
Tipo
CWE-601
Gravedad 2.0 Txt
Pendiente de análisis
Título en
CVE-2025-30164
Descripción en
Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 vulnerability allows an attacker to craft a URL that, once visited by an authenticated user (or one that is able to authenticate), allows to manipulate the backend to redirect the user to any location. This issue has been resolved in versions 2.11.5 and 2.12.3 of Icinga Web 2. No known workarounds are available.
26/03/2025
26/03/2025
Vector CVSS:3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N
Gravedad 3.1 (CVSS 3.1 Base Score)
4.10
Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
MEDIUM
Referencias
Enviar en el boletín
Off
