by Kastro
Paper/Archive/CVE-2022-46945

CVE-2022-46945

mitre — Nagvis before 1.9.34 was discovered to contain an arbitrary file read vulnerability via the component /core/classes/NagVisHoverUrl.php.

EPSS 4%public exploitCVSS 9.1
critical.is priorityof 100
56
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 90.8.908 × 2018.2Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Nagvis before 1.9.34 was discovered to contain an arbitrary file read vulnerability via the component /core/classes/NagVisHoverUrl.php.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

mitre (CNA)9.1CVSS:3.1/AC:L/AV:N/A:L/C:H/I:L/PR:L/S:C/UI:N
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: partial

References

refgithub.com/NagVis/nagvis/commit/71aba7f46f79d846e1df037f165d206a2cd1d22arefgithub.com/NagVis/nagvis/compare/nagvis-1.9.33...nagvis-1.9.34refsonarsource.com/blog/checkmk-rce-chain-3reflists.debian.org/debian-lts-announce/2025/05/msg00000.html