Vulnerability — CVE-2023-24516

CVE-2023-24516

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2023-24516
Description:: Cross-site Scripting (XSS) vulnerability in the Pandora FMS Special Days component allows an attacker to use it to steal the session cookie value of admin users easily with little user interaction. This issue affects Pandora FMS v767 version and prior versions on all platforms.
Last updated date:: 11/02/2023

Type:: exploit
Confidence:: HIGH
Date of publishing:: 11/02/2023
Reference url to background: https://gist.github.com/Argonx21/5ef4d123c975285b3a42835c8e81603a