Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2023-24518

Disabling the administrator's account through cross-site request forgery

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
INCIBE

Description

A Cross-site Request Forgery (CSRF) vulnerability in Pandora FMS allows an attacker to force authenticated users to send a request to a web application they are currently authenticated against. This issue affects Pandora FMS version 767 and earlier versions on all platforms.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Artica PFMS Pandora FMS

Default version status: unaffected

  • v0 to ≤ v767affected

References