PT-2017-14558 · Cacti+1 · Cacti+1

Cibvetr2 + 1 · Publicado 2017-11-10 · Atualizado 2024-06-15 · CVE-2017-16785

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cacti version 1.1.27

Description The issue is related to reflected XSS via the PATH INFO to host.php.

Recommendations For Cacti version 1.1.27, update to a newer version that contains a fix for this issue.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-16785

OPENSUSE-SU-2017_3051-1

OPENSUSE-SU-2024:10670-1

Produtos afetados

Cacti

Suse

Referências · 41

• 🔥 https://github.com/Cacti/cacti/issues/1071 · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-16785 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2018-20725 · Nota
• https://suse.com/security/cve/CVE-2017-12065 · Nota
• https://suse.com/security/cve/CVE-2009-4112 · Nota
• https://suse.com/security/cve/CVE-2017-16785 · Nota
• https://suse.com/security/cve/CVE-2020-7237 · Nota
• https://suse.com/security/cve/CVE-2019-16723 · Nota
• https://suse.com/security/cve/CVE-2017-15194 · Nota
• https://suse.com/security/cve/CVE-2018-20723 · Nota
• https://suse.com/security/cve/CVE-2017-11691 · Nota
• https://suse.com/security/cve/CVE-2020-11022 · Nota
• https://suse.com/security/cve/CVE-2020-35701 · Nota
• https://suse.com/security/cve/CVE-2017-10970 · Nota
• https://suse.com/security/cve/CVE-2017-12978 · Nota