CVE-2023-53689 — Nagios Fusion < 4.2.0 License Information Reflected XSS
Nagios Fusion versions prior to 4.2.0 contain a reflected cross-site scripting (XSS) vulnerability in the license key configuration flow that can result in execution of attacker…
Published: 2025-10-30 · CVSS: 6.0 · CVSS 4.0
Nagios Fusion versions prior to 4.2.0 contain a reflected cross-site scripting (XSS) vulnerability in the license key configuration flow that can result in execution of attacker-controlled script in the browser of a user who follows a crafted URL. While the application server itself is not directly corrupted by the reflected XSS, the resulting browser compromise can lead to credential/session theft and unauthorized administrative actions.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7