Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gj65-6229-2cwr

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENT_QUOTES flag (these calls occur when the html_escape function in lib/html.php is not used).

Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENT_QUOTES flag (these calls occur when the html_escape function in lib/html.php is not used).

EPSS

Процентиль: 76%
0.00955
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
ubuntu
почти 8 лет назад

Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENT_QUOTES flag (these calls occur when the html_escape function in lib/html.php is not used).

CVSS3: 5.4
nvd
почти 8 лет назад

Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENT_QUOTES flag (these calls occur when the html_escape function in lib/html.php is not used).

CVSS3: 5.4
debian
почти 8 лет назад

Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars ...

EPSS

Процентиль: 76%
0.00955
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79