CVE-2023-24518

Description

A Cross-site Request Forgery (CSRF) vulnerability in Pandora FMS allows an attacker to force authenticated users to send a request to a web application they are currently authenticated against. This issue affects Pandora FMS version 767 and earlier versions on all platforms.

Affected Platforms

Weakness Type

CWE-352, CWE-352

References

• https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
• https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/