CVE-2017-15194

Опубликовано: 11 окт. 2017

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

include/global_session.php in Cacti 1.1.25 has XSS related to (1) the URI or (2) the refresh page.

Ссылки

http://www.securitytracker.com/id/1039569
Third Party Advisory
VDB Entry
https://github.com/Cacti/cacti/commit/93f661d8adcfa6618b11522cdab30e97bada33fd
Patch
Third Party Advisory
https://github.com/Cacti/cacti/issues/1010
Exploit
Issue Tracking
Patch
Third Party Advisory
http://www.securitytracker.com/id/1039569
Third Party Advisory
VDB Entry
https://github.com/Cacti/cacti/commit/93f661d8adcfa6618b11522cdab30e97bada33fd
Patch
Third Party Advisory
https://github.com/Cacti/cacti/issues/1010
Exploit
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cacti:cacti:1.1.25:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.0107

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2017-15194

CVSS3: 6.1

ubuntu

почти 9 лет назад

include/global_session.php in Cacti 1.1.25 has XSS related to (1) the URI or (2) the refresh page.

CVE-2017-15194

CVSS3: 6.1

debian

почти 9 лет назад

include/global_session.php in Cacti 1.1.25 has XSS related to (1) the ...

openSUSE-SU-2017:2765-1

suse-cvrf

почти 9 лет назад

Security update for cacti and cacti-spine

GHSA-h6qg-xgjq-67wg

CVSS3: 6.1

github

больше 4 лет назад

include/global_session.php in Cacti 1.1.25 has XSS related to (1) the URI or (2) the refresh page.

EPSS

Процентиль: 63%

0.0107

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79