CVE-2023-3841
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
A vulnerability has been found in NxFilter version 4.3.2.5, affecting unknown code in the user.jsp file. The manipulation leads to cross-site request forgery, which can be initiated remotely.
Risk Assessment
This vulnerability may allow attackers to perform unauthorized actions on behalf of users, posing a significant security risk to the organization.
Recommendation
It is recommended to update NxFilter to the latest version to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
A vulnerability has been found in NxFilter 4.3.2.5 and classified as problematic. This vulnerability affects unknown code of the file user.jsp. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The identifier of this vulnerability is VDB-235192. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.