CVE-2023-40933 (published 2023-09-19T00:00:00)
A SQL injection vulnerability in Nagios XI v5.11.1 and below allows authenticated attackers with announcement banner configuration privileges to execute arbitrary SQL commands via the ID parameter sent to the update_banner_message() function.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a