Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-47373

Опубликовано: 15 фев. 2023
Источник: nvd
CVSS3: 6.4
CVSS3: 6.1
EPSS Низкий

Описание

Reflected Cross Site Scripting in Search Functionality of Module Library in Pandora FMS Console v766 and lower. This vulnerability arises on the forget password functionality in which parameter username does not proper input validation/sanitization thus results in executing malicious JavaScript payload.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:pandorafms:pandora_fms:*:*:*:*:*:*:*:*
Версия до 766 (включая)

EPSS

Процентиль: 52%
0.00285
Низкий

6.4 Medium

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-352
CWE-79

Связанные уязвимости

CVSS3: 6.4
ubuntu
почти 3 года назад

Reflected Cross Site Scripting in Search Functionality of Module Library in Pandora FMS Console v766 and lower. This vulnerability arises on the forget password functionality in which parameter username does not proper input validation/sanitization thus results in executing malicious JavaScript payload.

CVSS3: 6.1
github
почти 3 года назад

Reflected Cross Site Scripting in Search Functionality of Module Library in Pandora FMS Console v766 and lower. This vulnerability arises on the forget password functionality in which parameter username does not proper input validation/sanitization thus results in executing malicious JavaScript payload.

EPSS

Процентиль: 52%
0.00285
Низкий

6.4 Medium

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-352
CWE-79