Lucene search
PRIOn knowledge basePRION:CVE-2023-49086HistoryDec 22, 2023 - 12:15 a.m.
Design/Logic Flaw
2023-12-2200:15:00
PRIOn knowledge base
www.prio-n.com
7
cacti
vulnerability
graphs_new.php
dom xss
attack
patch
version 1.2.26
Cacti is a robust performance and fault management framework and a frontend to RRDTool - a Time Series Database (TSDB). Bypassing an earlier fix (CVE-2023-39360) that leads to a DOM XSS attack.
Exploitation of the vulnerability is possible for an authorized user. The vulnerable component is
the graphs_new.php. Impact of the vulnerability - execution of arbitrary javascript code in
the attacked user’s browser. This issue has been patched in version 1.2.26.
Related
ubuntucve
ubuntucve
CVE-2023-49086
2023-12-22 00:00:00
CVE-2023-39360
2023-09-05 00:00:00
osv
osv
CVE-2023-49086
2023-12-22 00:15:34
CVE-2023-39360
2023-09-05 21:15:46
cacti - security update
2024-03-24 00:00:00
nvd
nvd
CVE-2023-49086
2023-12-22 00:15:34
CVE-2023-39360
2023-09-05 21:15:46
cvelist
cvelist
CVE-2023-49086 Cacti is vulnerable to cross-Site scripting (XSS) DOM
2023-12-21 23:29:45
CVE-2023-39360 Reflected Cross-site Scripting in graphs_new.php in Cacti
2023-09-05 20:43:13
cve
cve
CVE-2023-49086
2023-12-22 00:15:34
CVE-2023-39360
2023-09-05 21:15:46
alpinelinux
alpinelinux
CVE-2023-49086
2023-12-22 00:15:34
CVE-2023-39360
2023-09-05 21:15:46
debiancve
debiancve
CVE-2023-49086
2023-12-22 00:15:34
CVE-2023-39360
2023-09-05 21:15:46
veracode
veracode
Cross Site Scripting(XSS)
2023-12-28 08:43:06
Cross-site Scripting
2023-09-12 22:32:21
cnvd
cnvd
Cacti cross-site scripting vulnerability (CNVD-2023-10109007)
2023-12-25 00:00:00
prion
prion
Cross site scripting
2023-09-05 21:15:00
openvas
openvas
Debian: Security Advisory (DSA-5646-1)
2024-03-25 00:00:00
Debian: Security Advisory (DLA-3765-1)
2024-03-19 00:00:00
openSUSE: Security Advisory for cacti, cacti (openSUSE-SU-2024:0031-1)
2024-03-04 00:00:00
nessus
nessus
openSUSE 15 Security Update : cacti, cacti-spine (openSUSE-SU-2024:0031-1)
2024-01-25 00:00:00
Debian dsa-5646 : cacti - security update
2024-03-24 00:00:00
Debian dla-3765 : cacti - security update
2024-03-18 00:00:00
debian
debian
[SECURITY] [DSA 5646-1] cacti security update
2024-03-24 13:02:20
[SECURITY] [DLA 3765-1] cacti security update
2024-03-18 18:26:19
fedora
fedora
[SECURITY] Fedora 39 Update: cacti-spine-1.2.27-1.fc39
2024-05-31 02:14:04
[SECURITY] Fedora 39 Update: cacti-1.2.27-1.fc39
2024-05-31 02:14:03
[SECURITY] Fedora 38 Update: cacti-1.2.25-1.fc38
2023-10-13 01:53:22