CVE-2023-41791

CVSS 3.1 Score 5.4 of 10 (medium)

Details

Published Nov 23, 2023

Updated: Nov 29, 2023

CWE ID 79

Summary

CVE-2023-41791 is a Cross-Site Scripting (XSS) vulnerability affecting Pandora FMS versions 700 through 773. This issue arises due to improper neutralization of user input during web page generation. An attacker with low privileges can exploit this flaw to inject malicious JavaScript code, potentially impacting the integrity of some configuration files. This vulnerability could lead to security breaches and unintended system modifications.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Artica Pandora Fms

Affected Vendors

Artica

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/sh0jWR
https://www.cve.org/CVERecord?id=CVE-2023-41791
https://nvd.nist.gov/vuln/detail/CVE-2023-41791

Back to Vulnerability Database