CVE-2023-24518 — Disabling the administrator's account through cross-site request forgery

CVE-2023-24518

Disabling the administrator's account through cross-site request forgery PUBLISHED

Description (CNA)

A Cross-site Request Forgery (CSRF) vulnerability in Pandora FMS allows an attacker to force authenticated users to send a request to a web application they are currently authenticated against. This issue affects Pandora FMS version 767 and earlier versions on all platforms.

Affected (CNA)

Vendor / product	Versions
Artica PFMS / Pandora FMS	affected v0 through v767

CWE

CWE-352

References

https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/

ADP enrichment

CVE

No English description supplied.

https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/

CISA-ADP

No English description supplied.

No references supplied.