Medium severity4.8NVD Advisory· Published Oct 30, 2025· Updated Jun 17, 2026
CVE-2023-53690
CVE-2023-53690
Description
Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability in the LDAP/AD authentication-server configuration. Unsanitized user input can be stored and later rendered in the administrative UI, causing JavaScript to execute in the browser of any user who views the affected page. An attacker who can add authentication servers via LDAP/AD integration could persist a malicious payload that executes in the context of other users' browsers.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: <4.2.0
Patches
Vulnerability mechanics
References
3- www.nagios.com/products/security/nvdVendor Advisory
- www.vulncheck.com/advisories/nagios-fusion-ldap-ad-integration-stored-xssnvdThird Party Advisory
- www.nagios.com/changelog/nagios-fusion/nvdRelease Notes
News mentions
0No linked articles in our index yet.