Nagios xi 5.8 JQuery Version

This support forum board is for support questions relating to Nagios xi, our flagship commercial network monitoring solution.
JustinPGE
Posts: 2
Joined: Tue Feb 04, 2020 8:18 am

Nagios xi 5.8 JQuery Version

Post by JustinPGE »

Hello,

I'm on Nagios xi 5.8 and Nessus is reporting a jquery vulnerability.

URL : https://x.x.x.x/nagiosxi/includes/js/jq ... 4.1.min.js
Installed version : 3.4.1
Fixed version : 3.5.0

Please let me know how to correct this.

-Justin
dchurch
Posts: 858
Joined: Wed Oct 07, 2020 12:46 pm
Location: Yo mama

Re: Nagios xi 5.8 JQuery Version

Post by dchurch »

That's not the version of jquery that Nagios xi 5.8 ships with. Something is broken or custom-patched with your installation if it's still using jquery 3.4.1. It hasn't used jquery 3.4.1 since the release of 5.7.1.

Relevant change log entry (see Nagios xi changelog):
5.7.1 - 06/11/2020
Updated jQuery to version 3.5.1 to fix security vulnerabilities -JO
If you didn't get an 8% raise over the course of the pandemic, you took a pay cut.

Discussion of wages is protected speech under the National Labor Relations Act, and no employer can tell you you can't disclose your pay with your fellow employees.
JustinPGE
Posts: 2
Joined: Tue Feb 04, 2020 8:18 am

Re: Nagios xi 5.8 JQuery Version

Post by JustinPGE »

I had upgraded it using the Web UI method. If there is a way to install 5.8 over my current installation to take care of jquery please let me know.
dchurch
Posts: 858
Joined: Wed Oct 07, 2020 12:46 pm
Location: Yo mama

Re: Nagios xi 5.8 JQuery Version

Post by dchurch »

What's the output of:

Code: Select all

ls -la /usr/local/nagiosxi/html/includes/js/jquery/
If you didn't get an 8% raise over the course of the pandemic, you took a pay cut.

Discussion of wages is protected speech under the National Labor Relations Act, and no employer can tell you you can't disclose your pay with your fellow employees.