Описание
Cross-site scripting (XSS) vulnerability in link.php in Cacti 1.1.12 allows remote anonymous users to inject arbitrary web script or HTML via the id parameter, related to the die_html_input_error function in lib/html_validate.php.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 1.1.12+ds1-1 |
| bionic | not-affected | 1.1.12+ds1-1 |
| cosmic | not-affected | 1.1.12+ds1-1 |
| devel | not-affected | 1.1.12+ds1-1 |
| esm-apps/bionic | not-affected | 1.1.12+ds1-1 |
| esm-apps/xenial | not-affected | code not present |
| esm-infra-legacy/trusty | not-affected | code not present |
| precise/esm | DNE | |
| trusty | not-affected | code not present |
| trusty/esm | not-affected | code not present |
Показывать по
EPSS
4.3 Medium
CVSS2
5.4 Medium
CVSS3
Связанные уязвимости
Cross-site scripting (XSS) vulnerability in link.php in Cacti 1.1.12 allows remote anonymous users to inject arbitrary web script or HTML via the id parameter, related to the die_html_input_error function in lib/html_validate.php.
Cross-site scripting (XSS) vulnerability in link.php in Cacti 1.1.12 a ...
Cross-site scripting (XSS) vulnerability in link.php in Cacti 1.1.12 allows remote anonymous users to inject arbitrary web script or HTML via the id parameter, related to the die_html_input_error function in lib/html_validate.php.
EPSS
4.3 Medium
CVSS2
5.4 Medium
CVSS3