{"id":"UBUNTU-CVE-2011-1523","details":"Cross-site scripting (XSS) vulnerability in statusmap.c in statusmap.cgi in Nagios 3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the layer parameter.","modified":"2026-02-04T03:29:25.997621Z","published":"2011-05-03T00:00:00Z","withdrawn":"2025-07-18T16:42:42Z","related":["USN-1151-1"],"upstream":["CVE-2011-1523"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2011-1523"},{"type":"REPORT","url":"http://www.rul3z.de/advisories/SSCHADV2011-002.txt"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-1151-1"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2011-1523"}],"affected":[{"package":{"name":"icinga","ecosystem":"Ubuntu:14.04:LTS","purl":"pkg:deb/ubuntu/icinga@1.10.3-1?arch=source&distro=trusty"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-1"}]}],"versions":["1.9.3-2","1.9.3-2build1","1.10.0-1","1.10.1-1","1.10.2-1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"icinga","binary_version":"1.10.3-1"},{"binary_name":"icinga-cgi","binary_version":"1.10.3-1"},{"binary_name":"icinga-common","binary_version":"1.10.3-1"},{"binary_name":"icinga-core","binary_version":"1.10.3-1"},{"binary_version":"1.10.3-1","binary_name":"icinga-dbg"},{"binary_name":"icinga-doc","binary_version":"1.10.3-1"},{"binary_name":"icinga-idoutils","binary_version":"1.10.3-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2011/UBUNTU-CVE-2011-1523.json"}}],"schema_version":"1.7.3","severity":[{"type":"Ubuntu","score":"medium"}]}