CVE-2023-41811

Summary

CVE-2023-41811 is a Cross-Site Scripting (XSS) vulnerability affecting Pandora FMS versions 700 through 773. This issue stems from improper neutralization of user input during web page generation in the news section of the web console. Successful exploitation allows an attacker to inject and execute malicious Javascript code in the victim's browser, potentially leading to information disclosure or unauthorized actions. It is crucial that users update their Pandora FMS installations to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.