CVE-2024-27082
Cacti Cross-site Scripting vulnerability when managing trees
Summary
Cacti Cross-site Scripting vulnerability when managing trees
Original description
The description as published by the source.
Cacti provides an operational monitoring and fault management framework. Versions of Cacti prior to 1.2.27 are vulnerable to stored cross-site scripting, a type of cross-site scripting where malicious scripts are permanently stored on a target server and served to users who access a particular page. Version 1.2.27 contains a patch for the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2024-27082 cacti Fixed in: 1.2.24+ds1-1+deb12u5
- Ubuntu UBUNTU-CVE-2024-27082 cacti
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov