CVE-2023-3841

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability has been found in NxFilter 4.3.2.5 and classified as problematic. This vulnerability affects unknown code of the file user.jsp. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The identifier of this vulnerability is VDB-235192. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-352

Affected software

Vendor	Product	Versions
n/a	NxFilter	4.3.2.5

References

https://vuldb.com/?ctiid.235192Permissions Required, Third Party Advisory
https://vuldb.com/?id.235192Permissions Required, Third Party Advisory
https://vuldb.com/?ctiid.235192Permissions Required, Third Party Advisory
https://vuldb.com/?id.235192Permissions Required, Third Party Advisory

Timeline

Published: Jul 23, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-384107.8The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A user may be able to ele CVE-2023-384117.8Improper access control in the Intel Smart Campus android application before version 9.4 may allow an authenticated user to potentially enab CVE-2023-384128.8Netgear R6900P v1.3.3.154 was discovered to contain multiple buffer overflows via the wla_ssid and wlg_ssid parameters at ia_ap_setting.cgi.CVE-2023-384174.3Improper input validation for some Intel(R) PROSet/Wireless WiFi software before version 23.20 may allow an unauthenticated user to potentia CVE-2023-384187.8The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process. Note: So CVE-2023-384194.3An authenticated attacker with guest privileges or higher can cause the iControl SOAP process to terminate by sending undisclosed requests. CVE-2023-38427.8A vulnerability was found in Pointware EasyInventory 1.0.12.0 and classified as critical. This issue affects some unknown processing of the CVE-2023-384203.8Improper conditions check in Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to potentially enable inf CVE-2023-384215.5The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5, macOS Monterey 12.6.8. Processing a 3D model may re CVE-2023-384227.5Walchem Intuition 9 firmware versions prior to v4.21 are missing authentication for some of the API routes of the management web server. Thi CVE-2023-384235.4A cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run CVE-2023-384247.8The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be ab