Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-10060
HistoryApr 12, 2018 - 4:29 p.m.

Design/Logic Flaw

2018-04-1216:29:00
PRIOn knowledge base
www.prio-n.com
4

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.5%

Cacti before 1.1.37 has XSS because it does not properly reject unintended characters, related to use of the sanitize_uri function in lib/functions.php.

CPENameOperatorVersion
cactile1.1.36
debian_linuxeq9.0

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.5%