3 matches found
CVE-2023-32791
NXLog Manager is affected by a CSRF vulnerability in version 5.6.5633. The issue arises from insufficient validation of request origin, enabling a remote attacker to manipulate and delete user accounts by sending a crafted query to the server. The CVE record lists a CVSS v3.1 base score of 6.5 (M...
CVE-2023-32790
NXLog Manager 5.6.5633 contains a Cross-Site Scripting (XSS) vulnerability where an attacker can inject JavaScript into the Full Name field during user edits due to improper input sanitization. The issue is documented across multiple sources (NVD/CVE-2023-32790) with the core detail that exploita...
CVE-2023-32792
CVE-2023-32792: CSRF in NXLog Manager 5.6.5633 due to lack of origin validation in incoming requests. An attacker can cause the platform to eliminate roles via a crafted request. Verified in multiple sources (NVD/NVDC/CNVD, etc.). Exploitation details are not provided in the reports; no in‑the‑wi...