CVE-2023-24034 PUBLISHED

Assigner: mitre
Reserved: 21.01.2023 Published: 14.09.2026 Updated: 14.09.2026

An issue was discovered in twilio_ajax_handler.php in Nagios XI before 5.9.3. An attacker can force a user to visit a malicious site by using a open redirect vulnerability.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS Score: 3.1

Attack Vector	Network	Scope	Unchanged
Attack Complexity	High	Confidentiality Impact	None
Privileges Required	None	Integrity Impact	Low
User Interaction	Required	Availability Impact	None

CVSS 3.1

Product Status

Vendor	Nagios
Product	Nagios XI
Versions	Default: unaffected affected from 0 to 5.9.3 (excl.)

References

https://www.nagios.com/downloads/nagios-xi/change-log/
https://www.nagios.com/security-disclosures/

Problem Types

CWE-601 URL Redirection to Untrusted Site ('Open Redirect') CWE