Skip to content
OpenAdvisories
Medium WID-SEC-2023-1482 1 CVE

PaloAlto Networks PAN-OS: Schwachstelle ermöglicht Cross-Site Scripting

Published Jun 14, 2023 · Updated Jun 14, 2023 · de-DE

Vendor: Palo Alto Networks Product: PaloAlto Networks PAN-OS < 10.0.11 Product: PaloAlto Networks PAN-OS < 10.1.6 Product: PaloAlto Networks PAN-OS < 10.2.2 Product: PaloAlto Networks PAN-OS < 8.1.24 Product: PaloAlto Networks PAN-OS < 9.0.17 Product: PaloAlto Networks PAN-OS < 9.1.16 Product: PAN-OS

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in PaloAlto Networks PAN-OS ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

PAN-OS ist das Betriebssystem der Sicherheitssysteme / Firewalls der Firma Palo Alto Networks.

Vulnerabilities 1

  • Medium 5.4
    CVE-2023-0010

    PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal Authentication

    A reflected cross-site scripting (XSS) vulnerability in the Captive Portal feature of Palo Alto Networks PAN-OS software can allow a JavaScript payload to be executed in the context of an authenticated Captive Portal user’s browser when they click on a specif…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices

Revision history

  1. #1

    Initiale Fassung

References