CVE-2022-2032

Pandora FMS, versions 7.0NG.761 and earlier, contains a stored XSS flaw in the file manager where the dirname parameter is susceptible to injection. The vulnerability can be exploited by an administrator logged into the system, potentially impacting confidentiality and integrity of data. The link...

CVE-2022-2032 Stored Cross Site-Scripting in File Manager

In Pandora FMS v7.0NG.761 and below, in the file manager section, the dirname parameter is vulnerable to a Stored Cross Site-Scripting. This vulnerability can be exploited by an attacker with administrator privileges logged in the system...