CVE-2023-41813: User notification settings edition
Published Dec 29, 2023
·Updated
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). Allows you to edit the Web Console user notification options. This issue affects Pandora FMS: from 700 through 774.
Affected Software
1 affected component
PandoraFMS Pandora FMS>=700<=774
Remediation
Information
Fixed in v775.
Event History
Dec 29, 2023
CVE Published
11:42 AM
Data Sourced
11:42 AM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-41813?
CVE-2023-41813 has a medium severity rating due to its potential for Cross-Site Scripting (XSS) attacks.
2
How do I fix CVE-2023-41813?
To fix CVE-2023-41813, update your Pandora FMS to version 775 or later to resolve the XSS vulnerability.
3
Which versions of Pandora FMS are affected by CVE-2023-41813?
CVE-2023-41813 affects Pandora FMS versions from 700 through 774.
4
What type of vulnerability is CVE-2023-41813?
CVE-2023-41813 is classified as a Cross-Site Scripting (XSS) vulnerability.
5
What impact does CVE-2023-41813 have on users?
CVE-2023-41813 allows attackers to inject malicious scripts, potentially leading to unauthorized actions on behalf of users.