[Forgot Password]
Login  Register Subscribe

23631

 
 

126336

 
 

98250

 
 

909

 
 

79281

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2017-12978

Date: (C)2017-08-22   (M)2017-12-06 


lib/html.php in Cacti before 1.1.18 has XSS via the title field of an external link added by an authenticated user.

CVSS Score: 3.5Access Vector: NETWORK
Exploit Score: 6.8Access Complexity: MEDIUM
Impact Score: 2.9Authentication: SINGLE_INSTANCE
 Confidentiality: NONE
 Integrity: PARTIAL
 Availability: NONE





Reference:
SECTRACK-1039226
https://github.com/Cacti/cacti/blob/develop/docs/CHANGELOG
https://github.com/Cacti/cacti/commit/9c610a7a4e29595dcaf7d7082134e4b89619ea24
https://github.com/Cacti/cacti/issues/918

CPE    1
cpe:/a:cacti:cacti:1.1.17
CWE    1
CWE-79
OVAL    2
oval:org.secpod.oval:def:1600781
oval:org.secpod.oval:def:113107

© 2013 SecPod Technologies