CVE-2023-41791: Lack of Authorization and Stored XSS Via Translation Abuse
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). This vulnerability allowed users with low privileges to introduce Javascript executables via a translation string that could affect the integrity of some configuration files. This issue affects Pandora FMS: from 700 through 773.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the vulnerability ID of this security issue?
The vulnerability ID of this security issue is CVE-2023-41791.
What is the severity level of CVE-2023-41791?
The severity level of CVE-2023-41791 is high (8.4).
What is the affected software for CVE-2023-41791?
The affected software for CVE-2023-41791 is Artica Pandora FMS version 700 to 773.
What is the CWE (Common Weakness Enumeration) category of CVE-2023-41791?
The CWE category of CVE-2023-41791 is CWE-79 (Improper Neutralization of Input During Web Page Generation).
How can I fix CVE-2023-41791?
To fix CVE-2023-41791, it is recommended to update the Artica Pandora FMS software to a version that includes the necessary patches to address this vulnerability.