VDB
BDU%3A2024-05744
BDU%3A2024-05744
PUBLISHED
CVSS 5.5 MEDIUM
Уязвимость функции automation_tree_rules_form_save() (automation_tree_rules.php) программного средства мониторинга сети Cacti, позволяющая нарушителю провести атаку межстайтового скриптинга (XSS)
Risk Scores
CVSS 2.0
5.5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fedora Project, The Cacti Group Inc. | Fedora, Cacti |
Timeline
- Jul 25, 2024 CVE Published
- Dec 27, 2024 CVE Updated
- Mar 19, 2026 Distribution Patch
References
- https://vuldb.com/?id.263998 url
- https://security.alpinelinux.org/vuln/CVE-2024-31444 url
- https://www.cvedetails.com/cve/CVE-2024-31444/ url
- https://gbhackers.com/critical-cacti-vulnerability/ url
- https://github.com/Cacti/cacti/security/advisories/GHSA-p4ch-7hjw-6m87 url
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-31444 url
- https://vulners.com/cve/CVE-2024-31444 url
- https://opencve.io/cve/CVE-2024-31444 url
- https://www.cve.org/CVERecord?id=CVE-2024-31444 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RBEOAFKRARQHTDIYSL723XAFJ2Q6624X/ advisory