CVE-2023-2807

CRITICAL 9.8CVE-2023-2807 · Published 13/06/2023 · updated 17/06/2026

In short

CVE-2023-2807 is a CRITICAL (CVSS 9.8) vulnerability affecting pandora fms (pandorafms).
Chance of exploitation in the next 30 days (EPSS): 0.62%, higher than 49.6% of all vulnerabilities.
Fix: update to 772 or later.

Package	Affected versions	Patched versions
pandora fms pandorafms	`< 772`	`772`

Description

Authentication Bypass by Spoofing vulnerability in the password reset process of Pandora FMS allows an unauthenticated attacker to initiate a password reset process for any user account without proper authentication. This issue affects PandoraFMS v771 and prior versions on all platforms.

References

pandorafms.com/en/security/common-vulnerabilities-and-exposures · Vendor Advisory

More vulnerabilities in pandora fms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

pandora fms

pandorafms

< 772

772

More vulnerabilities in pandora fms

See all →