CVE-2023-41814

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-41814
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). Through an HTML payload (iframe tag) it is possible to carry out XSS attacks when the user receiving the messages opens their notifications. This issue affects Pandora FMS: from 700 through 774.

3.7 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/ Vendor Advisory
https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/ Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:pandorafms:pandora_fms:*:*:*:*:*:*:*:*
History

21 Nov 2024, 08:21

Type Values Removed Values Added
References () https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/ - Vendor Advisory () https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/ - Vendor Advisory
CVSS v2 : unknown
v3 : 6.1 		v2 : unknown
v3 : 3.7

05 Jan 2024, 04:51

Type Values Removed Values Added
References () https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/ - () https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/ - Vendor Advisory
CVSS v2 : unknown
v3 : 3.7 		v2 : unknown
v3 : 6.1
First Time Pandorafms pandora Fms
Pandorafms
CPE cpe:2.3:a:pandorafms:pandora_fms:*:*:*:*:*:*:*:*

29 Dec 2023, 13:56

Type Values Removed Values Added
Summary
  • (es) La vulnerabilidad de neutralización incorrecta de la entrada durante la generación de páginas web ('Cross-site Scripting') en Pandora FMS on all permite Cross-Site Scripting (XSS). A través de un paylaod HTML (etiqueta iframe) es posible realizar ataques XSS cuando el usuario que recibe los mensajes abre sus notificaciones. Este problema afecta a Pandora FMS: del 700 al 774.

29 Dec 2023, 12:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-12-29 12:15

Updated : 2024-11-21 08:21

NVD link : CVE-2023-41814

Mitre link : CVE-2023-41814

CVE.ORG link : CVE-2023-41814

JSON object : View

Products Affected

pandorafms

  • pandora_fms
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')