CyberSecBulletin

Thruk vulnerabilities

We track 1 vulnerability in Thruk products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 15, 2024.

1vulnerabilities
1critical
0high
0exploited
9.9average CVSS score

Latest Thruk vulnerabilities

  • 9.9 Critical severity

    Thruk: Improper Control of Generation of Code

    CVE-2024-39915Sni

    Thruk is a multibackend monitoring webinterface for Naemon, Nagios, Icinga and Shinken using the Livestatus API. This authenticated RCE in Thruk allows authorized users with network access to inject arbitrary commands via the URL parameter during PDF report ge