Skip to content
OpenAdvisories
Medium · 6.7 CVE-2023-24518 EUVD-2023-28536GHSA-vvhp-c8hc-r9qg

Disabling the administrator's account through cross-site request forgery

Published Oct 3, 2023 · Updated Sep 23, 2024 · Assigned by INCIBE

Description

A Cross-site Request Forgery (CSRF) vulnerability in Pandora FMS allows an attacker to force authenticated users to send a request to a web application they are currently authenticated against. This issue affects Pandora FMS version 767 and earlier versions on all platforms.

Affected products

VendorProductAffectedFixed
Artica PFMS Pandora FMS v0 – ≤ v767 —

References