CVE-2022-47373CWE-352

Reflected Cross Site Scripting in Search Functionality of Module Library

Medium · published February 15, 2023

CVSS v3.1
6.4
EPSS
0%
Percentile
26.0
In the wild
Unconfirmed
What it is

Reflected Cross Site Scripting in Search Functionality of Module Library in Pandora FMS Console v766 and lower. This vulnerability arises on the forget password functionality in which parameter username does not proper input validation/sanitization thus results in executing malicious JavaScript payload.

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00338 · 26.0th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2023-02-15T00:00Z
EPSS history
Timeline
  • 15 FEB 00:00Z
    Reflected Cross Site Scripting in Search Functionality of Module Library
    cvelistv5