Thruk

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 5
    Known Exploited: 0
    0
    Critical Level Threats
    0
    High Level Threats
    5
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2024-23822

    Thruk Incorrect limitation of a pathname to a restricted directory (Path Traversal) (CWE-22)

    Last Modified: May 29, 2025
    Published: Jan 29, 2024

    CVE-2023-34096

    Thruk has Path Traversal Vulnerability in panorama.pm

    Last Modified: Feb 13, 2025
    Published: Jun 08, 2023

    CVE-2021-35490

    Thruk before 2.44 allows XSS for a quick command.

    Last Modified: Nov 21, 2024
    Published: Dec 15, 2021

    CVE-2021-35488

    Thruk 2.40-2 allows /thruk/#cgi-bin/status.cgi?style=combined&title={TITLE] Reflected XSS via the host or title parameter. An attacker could inject arbitrary JavaScript into status.cgi. The payload would be triggered every time an authenticated user browses the page containing it.

    Last Modified: Nov 21, 2024
    Published: Nov 09, 2021

    CVE-2021-35489

    Thruk 2.40-2 allows /thruk/#cgi-bin/extinfo.cgi?type=2&host={HOSTNAME]&service={SERVICENAME]&backend={BACKEND] Reflected XSS via the host or service parameter. An attacker could inject arbitrary JavaScript into extinfo.cgi. The malicious payload would be triggered every time an authenticated user browses the page containing it.

    Last Modified: Nov 21, 2024
    Published: Nov 09, 2021
    Items Per Page
    Thruk Vulnerabilities & Security CVEs | CVE-DB