CVE-2023-24518: Disabling the administrator's account through cross-site request forgery
A Cross-site Request Forgery (CSRF) vulnerability in Pandora FMS allows an attacker to force authenticated users to send a request to a web application they are currently authenticated against. This issue affects Pandora FMS version 767 and earlier versions on all platforms.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-24518?
The severity of CVE-2023-24518 is high with a CVSS score of 7.1.
How does the CSRF vulnerability in Pandora FMS (CVE-2023-24518) work?
The CSRF vulnerability in Pandora FMS allows an attacker to trick authenticated users into performing unwanted actions on their behalf.
Which versions of Pandora FMS are affected by CVE-2023-24518?
The CSRF vulnerability in Pandora FMS affects version 767 and earlier versions on all platforms.
Is there a fix available for CVE-2023-24518?
Yes, it is recommended to update to a version higher than 767 to mitigate the CSRF vulnerability in Pandora FMS.
Where can I find more information about CVE-2023-24518?
You can find more information about CVE-2023-24518 on the Pandora FMS website.