Search: CVE-2023-7323

CVE-2023-7323 is a medium-severity cross-site scripting (XSS) vulnerability affecting Nagios Log Server versions prior to 2024R1. The flaw exists in the Create User function due to improper neutralization of user input, allowing attackers to inject malicious scripts that execute in the victim's browser context. Exploitation requires low privileges and user interaction but no authentication. While no known exploits are currently reported in the wild, successful attacks could lead to session hijacking, credential theft, or unauthorized actions within the affected web application. European organizations using vulnerable Nagios Log Server versions are at risk, especially those in critical infrastructure and IT monitoring roles. Mitigation involves upgrading to version 2024R1 or later and implementing strict input validation and output encoding on user-supplied data. Countries with significant Nagios deployments and critical infrastructure monitoring, such as Germany, France, and the UK, are most likely to be affected. Due to the medium CVSS score and the nature of the vulnerability, organizations should prioritize patching to prevent potential exploitation.

EPSS 0.5%VulnerabilityCWE-79Germany+2