CVE-2023-53690

Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability in the LDAP/AD authentication-server configuration. Unsanitized user input can be stored and later rendered in the administrative UI, causing JavaScript to execute in the browser of any user who views the affected page. An attacker who can add authentication servers via LDAP/AD integration could persist a malicious payload that executes in the context of other users' browsers.

CVSS v3 4.8 MEDIUM

4.8^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.7 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://www.nagios.com/changelog/nagios-fusion/	Release Notes
https://www.nagios.com/products/security/#fusion	Vendor Advisory
https://www.vulncheck.com/advisories/nagios-fusion-ldap-ad-integration-stored-xss	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:nagios:fusion:*:*:*:*:*:*:*:*

History

18 Oct 2026, 00:10

Type	Values Removed	Values Added
Summary		(es) Las versiones de Nagios Fusion anteriores a la 4.2.0 contienen una vulnerabilidad de cross-site scripting (XSS) almacenada en la configuración del servidor de autenticación LDAP/AD. La entrada de usuario no saneada puede almacenarse y luego renderizarse en la interfaz de usuario administrativa, haciendo que JavaScript se ejecute en el navegador de cualquier usuario que vea la página afectada. Un atacante que pueda añadir servidores de autenticación a través de la integración LDAP/AD podría persistir una carga útil maliciosa que se ejecute en el contexto de los navegadores de otros usuarios.

Information

Published : 2025-10-30 22:15

Updated : 2026-10-18 00:10

NVD link : CVE-2023-53690

Mitre link : CVE-2023-53690

CVE.ORG link : CVE-2023-53690

JSON object : View

Products Affected

nagios

fusion

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"id": "CVE-2023-53690", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2023-53690", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-03T19:13:15.982124Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 1.7}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.2, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "PASSIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "HIGH", "subIntegrityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"vendor": "Nagios", "modules": ["LDAP/AD Integration"], "product": "Fusion", "versions": [{"status": "affected", "version": "0", "lessThan": "4.2.0", "versionType": "semver"}], "defaultStatus": "unaffected"}]}], "published": "2025-10-30T22:15:42.780", "references": [{"url": "https://www.nagios.com/changelog/nagios-fusion/", "tags": ["Release Notes"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.nagios.com/products/security/#fusion", "tags": ["Vendor Advisory"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/nagios-fusion-ldap-ad-integration-stored-xss", "tags": ["Third Party Advisory"], "source": "disclosure@vulncheck.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability in the LDAP/AD\u00a0authentication-server configuration.\u00a0Unsanitized user input can be stored and later rendered in the administrative UI, causing JavaScript to execute in the browser of any user who views the affected page. An attacker who can add authentication servers via LDAP/AD integration could persist a malicious payload that executes in the context of other users' browsers."}, {"lang": "es", "value": "Las versiones de Nagios Fusion anteriores a la 4.2.0 contienen una vulnerabilidad de cross-site scripting (XSS) almacenada en la configuraci\u00f3n del servidor de autenticaci\u00f3n LDAP/AD. La entrada de usuario no saneada puede almacenarse y luego renderizarse en la interfaz de usuario administrativa, haciendo que JavaScript se ejecute en el navegador de cualquier usuario que vea la p\u00e1gina afectada. Un atacante que pueda a\u00f1adir servidores de autenticaci\u00f3n a trav\u00e9s de la integraci\u00f3n LDAP/AD podr\u00eda persistir una carga \u00fatil maliciosa que se ejecute en el contexto de los navegadores de otros usuarios."}], "lastModified": "2026-10-18T00:10:00.123", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nagios:fusion:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C952BF8F-1658-4707-AB70-427476FC5FB9", "versionEndExcluding": "4.2.0"}], "operator": "OR"}]}], "sourceIdentifier": "disclosure@vulncheck.com"}