CVE-2023-4951

Name of the Vulnerable Software and Affected Versions GreenRADIUS versions prior to 5.1.2.2

Description A cross site scripting issue was discovered with the pagination function on the "Client-based Authentication Policy Configuration" screen of the GreenRADIUS web admin interface.

Recommendations For GreenRADIUS versions prior to 5.1.2.2, update to version 5.1.2.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the "Client-based Authentication Policy Configuration" screen until a patch is applied.