CVE-2023-31452

A cross-site request forgery (CSRF) token bypass was identified in PRTG 23.2.84.1566 and earlier versions that allows remote attackers to perform actions with the permissions of a victim user, provided the victim user has an active session and is induced to trigger the malicious request. This could force PRTG to execute different actions, such as creating new users. The severity of this vulnerability is high and received a score of 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

• CWE-352

• https://kb.paessler.com/en/topic/91845-multiple-vulnerabilites-fixed-in-paessler-prtg-network-monitor-23-3-86-1520Vendor Advisory
• https://www.paessler.com/prtg/history/prtg-23#23.3.86.1520
• https://www.paessler.com/prtg/history/stableRelease Notes
• https://kb.paessler.com/en/topic/91845-multiple-vulnerabilites-fixed-in-paessler-prtg-network-monitor-23-3-86-1520Vendor Advisory
• https://www.paessler.com/prtg/history/prtg-23#23.3.86.1520
• https://www.paessler.com/prtg/history/stableRelease Notes

Published

Aug 9, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-31446In Cassia Gateway firmware XC1000_2.1.1.2303082218 and XC200…9.8
• CVE-2023-31447user_login.cgi on Draytek Vigor2620 devices before 3.9.8.4 (…9.8
• CVE-2023-31448A path traversal vulnerability was identified in the HL7 sen…4.7
• CVE-2023-31449A path traversal vulnerability was identified in the WMI Cus…4.7
• CVE-2023-3145A vulnerability, which was classified as critical, has been …8.8
• CVE-2023-31450A path traversal vulnerability was identified in the SQL v2 …4.7
• CVE-2023-31453Incorrect Permission Assignment for Critical Resource Vulner…7.5
• CVE-2023-31454Incorrect Permission Assignment for Critical Resource Vulner…7.5
• CVE-2023-31455Pexip Infinity before 31.2 has Improper Input Validation for…7.5
• CVE-2023-31456There is an SSRF vulnerability in the Fluid Topics platform …5.4
• CVE-2023-31457A vulnerability in the Headquarters server component of Mite…9.8
• CVE-2023-31458A vulnerability in the Edge Gateway component of Mitel MiVoi…9.8