← CVE Intelligence

CVE-2023-0010

PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal Authentication PUBLISHED

Description (CNA)

A reflected cross-site scripting (XSS) vulnerability in the Captive Portal feature of Palo Alto Networks PAN-OS software can allow a JavaScript payload to be executed in the context of an authenticated Captive Portal user’s browser when they click on a specifically crafted link.

Affected (CNA)

Vendor / productVersions
Palo Alto Networks / PAN-OSunaffected 11.0; affected 10.2 before 10.2.2; affected 10.1 before 10.1.6; affected 10.0 before 10.0.11; affected 9.1 before 9.1.16; affected 9.0 before 9.0.17; affected 8.1 before 8.1.24
Palo Alto Networks / Cloud NGFWunaffected All
Palo Alto Networks / Prisma Accessunaffected All

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.