Security Advisory

CVE-2023-7323

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-10-30 21:27:03
Last updated 2025-11-17 21:36:23
Assigner VulnCheck
State PUBLISHED

Description

Nagios Log Server versions prior to 2024R1 are vulnerable to cross-site scripting (XSS) via the Create User function. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victims browser.