Skip to content
CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2022-47373

Reflected Cross Site Scripting in Search Functionality of Module Library

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
INCIBE

Description

Reflected Cross Site Scripting in Search Functionality of Module Library in Pandora FMS Console v766 and lower. This vulnerability arises on the forget password functionality in which parameter username does not proper input validation/sanitization thus results in executing malicious JavaScript payload.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Artica PFMS Pandora FMS

  • v766 to ≤ v766affected

References