Описание
Cross Site Scripting (XSS) vulnerability in Cacti 1.2.21 via crafted POST request to graphs_new.php.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| cacti | fixed | 1.2.22+ds1-1 | package | |
| cacti | not-affected | buster | package |
Примечания
https://gist.github.com/enferas/9079535112e4f4ff2c1d2ce1c099d4c2
Fixed by: https://github.com/Cacti/cacti/commit/ccb8b62de0f27f59d5e6073c2ae577a9ca7adaf8 (release/1.2.22)
Introduced by: https://github.com/Cacti/cacti/commit/572a3654c7efdbf82ad540f163438a1ba7c4b8bf (release/1.2.6)
Связанные уязвимости
Cross Site Scripting (XSS) vulnerability in Cacti 1.2.21 via crafted POST request to graphs_new.php.
Cross Site Scripting (XSS) vulnerability in Cacti 1.2.21 via crafted POST request to graphs_new.php.
Cross Site Scripting (XSS) vulnerability in Cacti 1.2.21 via crafted POST request to graphs_new.php.
Уязвимость компонента graphs_new.php программного средства мониторинга сети Cacti, позволяющая нарушителю осуществлять межсайтовые сценарные атаки XSS