CVE-2023-41792 — Lack of Authorization and Stored XSS Via SNMP Trap Editor Page
Cross-Site Request Forgery (CSRF) vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). This vulnerability allowed Javascript code to be executed in the SNMP Tr…
Published: 2023-11-23 · CVSS: 5.9 · CVSS 3.1
Cross-Site Request Forgery (CSRF) vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). This vulnerability allowed Javascript code to be executed in the SNMP Trap Editor. This issue affects Pandora FMS: from 700 through 773.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7