VDB
BDU%3A2024-05745
BDU%3A2024-05745
PUBLISHED
CVSS 5.5 MEDIUM
Уязвимость функции form_save() (data_queries.php) программного средства мониторинга сети Cacti, позволяющая нарушителю выполнить межсайтовый скриптинг
Risk Scores
CVSS 2.0
5.5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fedora Project, The Cacti Group Inc. | Fedora, Cacti |
Timeline
- Jul 25, 2024 CVE Published
- Dec 27, 2024 CVE Updated
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31443 url
- https://github.com/Cacti/cacti/commit/f946fa537d19678f938ddbd784a10e3290d275cf advisory
- https://www.suse.com/security/cve/CVE-2024-31443.html url
- https://gbhackers.com/critical-cacti-vulnerability/ url
- https://github.com/Cacti/cacti/security/advisories/GHSA-rqc8-78cm-85j3 advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RBEOAFKRARQHTDIYSL723XAFJ2Q6624X/ advisory