We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2023-32790

XSS on NXLog Manager



AssignerINCIBE
Reserved2023-05-15
Published2023-10-03
Updated2024-09-05

Description

Cross-Site Scripting (XSS) vulnerability in NXLog Manager 5.6.5633 version. This vulnerability allows an attacker to inject a malicious JavaScript payload into the 'Full Name' field during a user edit, due to improper sanitization of the input parameter.



MEDIUM: 4.6CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L

Problem types

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Product status

Default status
0x400069b880

5.6.5633
affected

Credits

Juampa Rodríguez 0x400069b8b0

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-nxlog-manager

cve.org CVE-2023-32790

nvd.nist.gov CVE-2023-32790

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2023-32790
Subscribe to our newsletter to learn more about our work.