CVEvulnerability
CVE-2022-47373
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-02-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L
- CVSS 3.1 ([email protected])
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Weaknesses
- CWE-352, CWE-79
Description
Reflected Cross Site Scripting in Search Functionality of Module Library in Pandora FMS Console v766 and lower. This vulnerability arises on the forget password functionality in which parameter username does not proper input validation/sanitization thus results in executing malicious JavaScript payload.
Affected configurations
• pandorafms pandora fms (<= 766)
Related
References
- https://github.com/Argonx21/CVE-2022-47373 Third Party Advisory
- https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/ Vendor Advisory
- https://github.com/Argonx21/CVE-2022-47373 Third Party Advisory
- https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/ Vendor Advisory