CVE-2023-24518
CVSS V2 None
CVSS V3 None
Description
A Cross-site Request Forgery (CSRF) vulnerability in Pandora FMS allows an attacker to force authenticated users to send a request to a web application they are currently authenticated against. This issue affects Pandora FMS version 767 and earlier versions on all platforms.
Overview
- CVE ID
- CVE-2023-24518
- Assigner
- INCIBE
- Vulnerability Status
- PUBLISHED
- Published Version
- 2023-10-03T10:41:42.777Z
- Last Modified Date
- 2023-10-03T10:41:42.777Z
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/ | vendor-advisory |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2023-24518 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24518 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-06-25 07:23:14 | Added to TrackCVE |