CVE-2023-7312

Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability when adding or configuring Email Settings. Unsanitized user input can be stored and later rendered in the administrative UI, causing JavaScript to execute in the browser of any user who views the affected page. An attacker who can add or modify SMTP/email settings or manipulate the sendmail configuration fields could persist a malicious payload that executes in the context of other users' browsers.

CVSS v3 4.8 MEDIUM

4.8^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.7 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://www.nagios.com/changelog/nagios-fusion/	Product
https://www.nagios.com/products/security/#fusion	Vendor Advisory
https://www.vulncheck.com/advisories/nagios-fusion-email-settings-stored-xss-via-smtp-sendmail	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:nagios:fusion:*:*:*:*:*:*:*:*

History

18 Oct 2026, 00:10

Type	Values Removed	Values Added
Summary		(es) Las versiones de Nagios Fusion anteriores a la 4.2.0 contienen una vulnerabilidad de cross-site scripting (XSS) almacenada al añadir o configurar los Ajustes de Correo Electrónico. La entrada de usuario no saneada puede ser almacenada y posteriormente renderizada en la interfaz de usuario administrativa, causando que JavaScript se ejecute en el navegador de cualquier usuario que vea la página afectada. Un atacante que pueda añadir o modificar los ajustes SMTP/de correo electrónico o manipular los campos de configuración de sendmail podría persistir una carga útil maliciosa que se ejecuta en el contexto de los navegadores de otros usuarios.

Information

Published : 2025-10-30 22:15

Updated : 2026-10-18 00:10

NVD link : CVE-2023-7312

Mitre link : CVE-2023-7312

CVE.ORG link : CVE-2023-7312

JSON object : View

Products Affected

nagios

fusion

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"id": "CVE-2023-7312", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2023-7312", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-03T18:36:58.549361Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 1.7}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.2, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "PASSIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "HIGH", "subIntegrityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"vendor": "Nagios", "modules": ["Email Settings"], "product": "Fusion", "versions": [{"status": "affected", "version": "0", "lessThan": "4.2.0", "versionType": "semver"}], "defaultStatus": "unaffected"}]}], "published": "2025-10-30T22:15:42.930", "references": [{"url": "https://www.nagios.com/changelog/nagios-fusion/", "tags": ["Product"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.nagios.com/products/security/#fusion", "tags": ["Vendor Advisory"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/nagios-fusion-email-settings-stored-xss-via-smtp-sendmail", "tags": ["Third Party Advisory"], "source": "disclosure@vulncheck.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Nagios Fusion versions prior to\u00a04.2.0 contain a stored cross-site scripting (XSS) vulnerability when\u00a0adding or configuring Email Settings. Unsanitized user input can be stored and later rendered in the administrative UI, causing JavaScript to execute in the browser of any user who views the affected page. An attacker who can add or modify SMTP/email settings or manipulate the sendmail configuration fields could persist a malicious payload that executes in the context of other users' browsers."}, {"lang": "es", "value": "Las versiones de Nagios Fusion anteriores a la 4.2.0 contienen una vulnerabilidad de cross-site scripting (XSS) almacenada al a\u00f1adir o configurar los Ajustes de Correo Electr\u00f3nico. La entrada de usuario no saneada puede ser almacenada y posteriormente renderizada en la interfaz de usuario administrativa, causando que JavaScript se ejecute en el navegador de cualquier usuario que vea la p\u00e1gina afectada. Un atacante que pueda a\u00f1adir o modificar los ajustes SMTP/de correo electr\u00f3nico o manipular los campos de configuraci\u00f3n de sendmail podr\u00eda persistir una carga \u00fatil maliciosa que se ejecuta en el contexto de los navegadores de otros usuarios."}], "lastModified": "2026-10-18T00:10:00.123", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nagios:fusion:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C952BF8F-1658-4707-AB70-427476FC5FB9", "versionEndExcluding": "4.2.0"}], "operator": "OR"}]}], "sourceIdentifier": "disclosure@vulncheck.com"}