Threats Tagged 'cve-2023-7323'
View all threats tagged with 'cve-2023-7323'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2023-7323'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2023-7323 is a medium-severity cross-site scripting (XSS) vulnerability affecting Nagios Log Server versions prior to 2024R1. The flaw exists in the Create User function due to improper neutralization of user input, allowing attackers to inject malicious scripts that execute in the victim's browser context. Exploitation requires low privileges and user interaction but no authentication. While no known exploits are currently reported in the wild, successful attacks could lead to session hijacking, credential theft, or unauthorized actions within the affected web application. European organizations using vulnerable Nagios Log Server versions are at risk, especially those in critical infrastructure and IT monitoring roles. Mitigation involves upgrading to version 2024R1 or later and implementing strict input validation and output encoding on user-supplied data. Countries with significant Nagios deployments and critical infrastructure monitoring, such as Germany, France, and the UK, are most likely to be affected. Due to the medium CVSS score and the nature of the vulnerability, organizations should prioritize patching to prevent potential exploitation. Join the discussion | CVE Database V5 | 10/30/2025, 21:27:03 UTC Added: 10/30/2025, 21:40:50 UTC |
Showing 1 to 1 of 1 result