CVE-2023-0828: Stored Cross Site Scripting in syslog section
Cross-site Scripting (XSS) vulnerability in Syslog Section of Pandora FMS allows attacker to cause that users cookie value will be transferred to the attackers users server. This issue affects Pandora FMS v767 version and prior versions on all platforms.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-0828?
The severity of CVE-2023-0828 is medium with a CVSS v3.1 score of 6.1.
How does the Cross-site Scripting (XSS) vulnerability in the Syslog Section of Pandora FMS work?
The Cross-site Scripting (XSS) vulnerability allows an attacker to inject malicious scripts into the Syslog Section of Pandora FMS, which can then be executed by unsuspecting users.
Which version of Pandora FMS is affected by CVE-2023-0828?
Pandora FMS v767 and prior versions on all platforms are affected by CVE-2023-0828.
How can I fix CVE-2023-0828?
To fix CVE-2023-0828, it is recommended to upgrade to a patched version of Pandora FMS that addresses the Cross-site Scripting (XSS) vulnerability.
Where can I find more information about CVE-2023-0828?
More information about CVE-2023-0828 can be found at the following reference: https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/