Описание
Cacti provides an operational monitoring and fault management framework. Prior to 1.2.27, some of the data stored in form_save() function in data_queries.php is not thoroughly checked and is used to concatenate the HTML statement in grow_right_pane_tree() function from lib/html.php , finally resulting in cross-site scripting. Version 1.2.27 contains a patch for the issue.
Ссылки
- Patch
- ExploitVendor Advisory
- Product
- Patch
- ExploitVendor Advisory
- Product
Уязвимые конфигурации
EPSS
5.7 Medium
CVSS3
5.4 Medium
CVSS3
Дефекты
Связанные уязвимости
Cacti provides an operational monitoring and fault management framework. Prior to 1.2.27, some of the data stored in `form_save()` function in `data_queries.php` is not thoroughly checked and is used to concatenate the HTML statement in `grow_right_pane_tree()` function from `lib/html.php` , finally resulting in cross-site scripting. Version 1.2.27 contains a patch for the issue.
Cacti provides an operational monitoring and fault management framewor ...
Уязвимость функции form_save() (data_queries.php) программного средства мониторинга сети Cacti, позволяющая нарушителю выполнить межсайтовый скриптинг
EPSS
5.7 Medium
CVSS3
5.4 Medium
CVSS3