CVE-2023-39515

🗓️ 05 Sep 2023 20:06:20Reported by GitHub_MType

cve🔗 web.nvd.nist.gov👁 158 Views🌐 WEB

Cacti 1.2.25 Stored Cross-Site-Scripting (XSS) Vulnerabilit

Reporter	Title	Published	Views	Family All 88
ATTACKERKB	CVE-2023-49088	22 Dec 202317:15	–	attackerkb
AlpineLinux	CVE-2023-39515	5 Sep 202320:06	–	alpinelinux
AlpineLinux	CVE-2023-49088	22 Dec 202316:16	–	alpinelinux
Circl	CVE-2023-39515	6 Sep 202300:17	–	circl
CNNVD	Cacti Cross-Site Scripting Vulnerability	5 Sep 202300:00	–	cnnvd
Cvelist	CVE-2023-39515 Stored Cross-site Scripting on data_debug.php datasource path view in Cacti	5 Sep 202320:06	–	cvelist
Debian	[SECURITY] [DLA 3765-1] cacti security update	18 Mar 202418:26	–	debian
Debian	[SECURITY] [DSA 5550-1] cacti security update	8 Nov 202322:40	–	debian
Debian CVE	CVE-2023-39515	5 Sep 202320:06	–	debiancve
Tenable Nessus	Debian dla-3765 : cacti - security update	18 Mar 202400:00	–	nessus

NVD

Vulners

Node

cacti cactiRange<1.2.25

Node

fedoraproject fedoraMatch37

fedoraproject fedoraMatch38

[
  {
    "vendor": "Cacti",
    "product": "cacti",
    "versions": [
      {
        "version": "< 1.2.25",
        "status": "affected"
      }
    ]
  }
]

Source	Link
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/WZGB2UXJEUYWWA6IWVFQ3ZTP22FIHMGN/
debian	www.debian.org/security/2023/dsa-5550
github	www.github.com/Cacti/cacti/security/advisories/GHSA-hrg9-qqqx-wc4h
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/WOQFYGLZBAWT4AWNMO7DU73QXWPXTCKH/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/CFH3J2WVBKY4ZJNMARVOWJQK6PSLPHFH/
lists	www.lists.debian.org/debian-lts-announce/2024/03/msg00018.html

Parameter	Position	Path	Description	CWE
data_source_path	path	cacti/data_sources.php	Stored XSS via configuring the data source path which is later displayed in data_debug.php	CWE-79
data_source_path	nested	cacti/data_debug.php	Stored XSS reflected when viewing data_debug.php which outputs the configured data source path	CWE-79

21 Nov 2024 08:15Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.14.8 - 6.1

EPSS0.00294

SSVC

CWE-79