CVE-2023-38349

Publication date 15 July 2023

Last updated 26 August 2025

Ubuntu priority

Cvss 3 Severity Score

PNP4Nagios through 81ebfc5 lacks CSRF protection in the AJAX controller. This affects 0.6.26.

Show unmaintained releases

Package	Ubuntu Release	Status
pnp4nagios	23.04 lunar	Not in release
	22.10 kinetic	Not in release
	22.04 LTS jammy	Not in release
	20.04 LTS focal	Not in release
	18.04 LTS bionic	Ignored end of standard support
	16.04 LTS xenial	Ignored end of standard support
	14.04 LTS trusty	Ignored end of standard support

CVSS version: CVSS v3.0

Base score 8.8 · High

Base metrics

Scores

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H