Unrated

A cross-site scripting (XSS) vulnerability exists in color_templates.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the...

CVE-2018-20723 First seen on SecPulse Jan 17, 2019

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2018-20723 cacti Fixed in: 1.2.1+ds1-1

Original description The description as published by the source.

A cross-site scripting (XSS) vulnerability exists in color_templates.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Name field for a Color.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
patch github.com
report github.com
web lists.opensuse.org
web lists.opensuse.org
web lists.opensuse.org
web lists.opensuse.org

Key facts

Severity: Unrated
Published: Jan 17, 2019
First seen on SecPulse: Jan 17, 2019

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:50