We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2023-32790

XSS on NXLog Manager



Description

Cross-Site Scripting (XSS) vulnerability in NXLog Manager 5.6.5633 version. This vulnerability allows an attacker to inject a malicious JavaScript payload into the 'Full Name' field during a user edit, due to improper sanitization of the input parameter.

Reserved 2023-05-15 | Published 2023-10-03 | Updated 2024-09-05 | Assigner INCIBE


MEDIUM: 4.6CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L

Problem types

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Product status

Default status
unaffected

5.6.5633
affected

Credits

Juampa Rodríguez finder

References

www.incibe.es/...viso/multiple-vulnerabilities-nxlog-manager

cve.org (CVE-2023-32790)

nvd.nist.gov (CVE-2023-32790)

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2023-32790

Support options

Helpdesk Chat, Email, Knowledgebase
Subscribe to our newsletter to learn more about our work.