Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-14424

Опубликовано: 14 нояб. 2021
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4.3
CVSS3: 6.1

Описание

Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme.

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

not-affected

1.2.16+ds1-2ubuntu1
esm-apps/bionic

released

1.1.38+ds1-1ubuntu0.1~esm1
esm-apps/focal

released

1.2.10+ds1-1ubuntu1+esm1
esm-apps/jammy

not-affected

1.2.16+ds1-2ubuntu1
esm-apps/noble

not-affected

1.2.16+ds1-2ubuntu1
esm-apps/xenial

not-affected

code not present
esm-infra-legacy/trusty

not-affected

focal

ignored

end of standard support, was needed
hirsute

not-affected

1.2.16+ds1-2ubuntu1

Показывать по

EPSS

Процентиль: 59%
0.00388
Низкий

4.3 Medium

CVSS2

6.1 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.1
nvd
около 4 лет назад

Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme.

CVSS3: 6.1
debian
около 4 лет назад

Cacti before 1.2.18 allows remote attackers to trigger XSS via templat ...

suse-cvrf
больше 4 лет назад

Security update for cacti, cacti-spine

github
больше 3 лет назад

Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme.

EPSS

Процентиль: 59%
0.00388
Низкий

4.3 Medium

CVSS2

6.1 Medium

CVSS3