Page 1 of 1

Nagios XI 5.8 JQuery Version

Posted: Fri Feb 19, 2021 2:25 pm
by JustinPGE
Hello,

I'm on Nagios XI 5.8 and Nessus is reporting a jquery vulnerability.

URL : https://x.x.x.x/nagiosxi/includes/js/jq ... 4.1.min.js
Installed version : 3.4.1
Fixed version : 3.5.0

Please let me know how to correct this.

-Justin

Re: Nagios XI 5.8 JQuery Version

Posted: Fri Feb 19, 2021 4:59 pm
by dchurch
That's not the version of jquery that Nagios XI 5.8 ships with. Something is broken or custom-patched with your installation if it's still using jquery 3.4.1. It hasn't used jquery 3.4.1 since the release of 5.7.1.

Relevant change log entry (see Nagios XI changelog):
5.7.1 - 06/11/2020
Updated jQuery to version 3.5.1 to fix security vulnerabilities -JO

Re: Nagios XI 5.8 JQuery Version

Posted: Wed Mar 03, 2021 3:34 pm
by JustinPGE
I had upgraded it using the Web UI method. If there is a way to install 5.8 over my current installation to take care of jquery please let me know.

Re: Nagios XI 5.8 JQuery Version

Posted: Thu Mar 04, 2021 4:52 pm
by dchurch
What's the output of:

Code: Select all

ls -la /usr/local/nagiosxi/html/includes/js/jquery/