icingaweb2 vulnerabilities

2 known vulnerabilities in icingaweb2 from Icinga. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  icingaweb2: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-24716Mar 8, 2022IcingaEPSS 89.4%

  Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of the local system accessible to the web-server user, including `icingaweb2` configuration files with database

• 8.8 High severity

  icingaweb2: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-24715Mar 8, 2022IcingaEPSS 14.9%

  Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Authenticated users, with access to the configuration, can create SSH resource files in unintended directories, leading to the execution of arbitrary code. This issu