Cacti Cross-Site Scripting Vulnerability (CNVD-2022-08363)

Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool uses snmpget to obtain data, uses RRDtool to draw graphs for analysis, and provides data and user management features. cross-site scripting vulnerability exists in Cacti, which stems from the injection of arbitrary HTML in the group prefix field when a user with administrative privileges and authenticated creates a new group via the Copy method in the user group admin.php. No details of the vulnerability are currently available.