Lucene search
+L

3 matches found

NVD
NVD
added 2023/08/22 7:16 p.m.26 views

CVE-2023-24516

Cross-site Scripting XSS vulnerability in the Pandora FMS Special Days component allows an attacker to use it to steal the session cookie value of admin users easily with little user interaction. This issue affects Pandora FMS v767 version and prior versions on all platforms...

5.9CVSS5.4AI score0.00439EPSS
SaveExploits1References2
CVE
CVE
added 2023/08/22 1:3 p.m.55 views

CVE-2023-24516

CVE-2023-24516 is a Cross-site Scripting (XSS) vulnerability in the Pandora FMS Special Days component. The issue can allow an attacker to steal the admin session cookie, with little user interaction, and affects Pandora FMS v767 and earlier on all platforms. The nature of the flaw is stored XSS ...

5.9CVSS5.3AI score0.00439EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2023/08/22 1:3 p.m.31 views

CVE-2023-24516 Stored Cross Site Scripting - Special Days Module

Cross-site Scripting XSS vulnerability in the Pandora FMS Special Days component allows an attacker to use it to steal the session cookie value of admin users easily with little user interaction. This issue affects Pandora FMS v767 version and prior versions on all platforms...

5.9CVSS5.6AI score0.00439EPSS
SaveExploits1References2
Rows per page
Query Builder