Lucene search
+L
NxlogNxlog Manager

3 matches found

CVE
CVE
added 2023/10/03 12:43 p.m.102 views

CVE-2023-32791

NXLog Manager is affected by a CSRF vulnerability in version 5.6.5633. The issue arises from insufficient validation of request origin, enabling a remote attacker to manipulate and delete user accounts by sending a crafted query to the server. The CVE record lists a CVSS v3.1 base score of 6.5 (M...

6.5CVSS6.5AI score0.00232EPSS
Save
CVE
CVE
added 2023/10/03 12:40 p.m.98 views

CVE-2023-32790

NXLog Manager 5.6.5633 contains a Cross-Site Scripting (XSS) vulnerability where an attacker can inject JavaScript into the Full Name field during user edits due to improper input sanitization. The issue is documented across multiple sources (NVD/CVE-2023-32790) with the core detail that exploita...

6.1CVSS4.9AI score0.00331EPSS
Save
CVE
CVE
added 2023/10/03 12:47 p.m.88 views

CVE-2023-32792

CVE-2023-32792: CSRF in NXLog Manager 5.6.5633 due to lack of origin validation in incoming requests. An attacker can cause the platform to eliminate roles via a crafted request. Verified in multiple sources (NVD/NVDC/CNVD, etc.). Exploitation details are not provided in the reports; no in‑the‑wi...

6.5CVSS6.5AI score0.00232EPSS
Save