← back
CVE-2022-23961

CVE-2022-23961

CVSS 6.1 MEDIUMEPSS 0.2%CWE-79
In Thruk Monitoring through 2.46.3, the login field of the login form is vulnerable to reflected XSS. This vulnerability can be exploited by unauthenticated remote attackers to target users of the monitoring interface.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://herolab.usd.de/security-advisories/https://herolab.usd.de/security-advisories/usd-2021-0034/