Unrated

In clearFilter() in utilities.php in Cacti before 1.2.3, no escaping occurs before printing out the value of the SNMP community string (SNMP Options)...

CVE-2019-11025 First seen on SecPulse Apr 9, 2019

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2019-11025 cacti Fixed in: 1.2.2+ds1-2

Original description The description as published by the source.

In clearFilter() in utilities.php in Cacti before 1.2.3, no escaping occurs before printing out the value of the SNMP community string (SNMP Options) in the View poller cache, leading to XSS.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory lists.debian.org
advisory lists.debian.org
report github.com

Key facts

Severity: Unrated
Published: Apr 9, 2019
First seen on SecPulse: Apr 9, 2019

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:50