GCVE-110-MAGEIA-2019-246

Advisory Published

Vulnetix · Advisory published September 6, 2019

Updated monit package fixes security vulnerabilities: Zack Flack discovered that Monit incorrectly handled certain input. A remote authenticated user could exploit this to conduct cross-site scripting (XSS) attacks (CVE-2019-11454). Zack Flack discovered a buffer overread when Monit decoded certain crafted URLs. An attacker could exploit this to leak potentially sensitive information (CVE-2019-11455).

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	monit	0 (affected), 5.25.3-1.1.mga6 (unaffected)	—

References

Updated monit packages fix security vulnerabilities

advisory

Updated monit packages fix security vulnerabilities

issue

Updated monit packages fix security vulnerabilities

url

Browse GCVE Records

20,133 records in the GCVE database · Updated October 22, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON