[Forgot Password]
Login  Register Subscribe

23631

 
 

115038

 
 

96174

 
 

909

 
 

78077

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2017-12978

Date: (C)2017-08-22   (M)2017-10-04
 
CVSS Score: 3.5Access Vector: NETWORK
Exploitability Subscore: 6.8Access Complexity: MEDIUM
Impact Subscore: 2.9Authentication: SINGLE_INSTANCE
 Confidentiality: NONE
 Integrity: PARTIAL
 Availability: NONE











lib/html.php in Cacti before 1.1.18 has XSS via the title field of an external link added by an authenticated user.

Reference:
SECTRACK-1039226
https://github.com/Cacti/cacti/blob/develop/docs/CHANGELOG
https://github.com/Cacti/cacti/commit/9c610a7a4e29595dcaf7d7082134e4b89619ea24
https://github.com/Cacti/cacti/issues/918

CWE    1
CWE-79
OVAL    2
oval:org.secpod.oval:def:113107
oval:org.secpod.oval:def:1600781

© 2013 SecPod Technologies