CVE-2022-45437

CVSS V2 None CVSS V3 None
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Artica PFMS Pandora FMS v765 on all allows Cross-Site Scripting (XSS). A user with edition privileges can create a Payload in the reporting dashboard module. An admin user can observe the Payload without interaction and attacker can get information.
Overview
  • CVE ID
  • CVE-2022-45437
  • Assigner
  • cve-coordination@incibe.es
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-02-15T04:15:10
  • Last Modified Date
  • 2023-02-23T18:22:45
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:pandorafms:pandora_fms:765:*:*:*:*:*:*:* 1 OR
References
History
Created Old Value New Value Data Type Notes
2023-04-17 07:47:06 Added to TrackCVE
2023-04-17 07:47:08 Weakness Enumeration new