CVE-2017-10970

2017-07-0611:29:00

Debian Security Bug Tracker

security-tracker.debian.org

0.001 Low

EPSS

Percentile

36.2%

JSON

Cross-site scripting (XSS) vulnerability in link.php in Cacti 1.1.12 allows remote anonymous users to inject arbitrary web script or HTML via the id parameter, related to the die_html_input_error function in lib/html_validate.php.

OSVersionArchitecturePackageVersionFilename
Debian12allcacti< 1.1.12+ds1-1cacti_1.1.12+ds1-1_all.deb
Debian11allcacti< 1.1.12+ds1-1cacti_1.1.12+ds1-1_all.deb
Debian10allcacti< 1.1.12+ds1-1cacti_1.1.12+ds1-1_all.deb
Debian999allcacti< 1.1.12+ds1-1cacti_1.1.12+ds1-1_all.deb
Debian13allcacti< 1.1.12+ds1-1cacti_1.1.12+ds1-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	cacti	< 1.1.12+ds1-1	cacti_1.1.12+ds1-1_all.deb
Debian	11	all	cacti	< 1.1.12+ds1-1	cacti_1.1.12+ds1-1_all.deb
Debian	10	all	cacti	< 1.1.12+ds1-1	cacti_1.1.12+ds1-1_all.deb
Debian	999	all	cacti	< 1.1.12+ds1-1	cacti_1.1.12+ds1-1_all.deb
Debian	13	all	cacti	< 1.1.12+ds1-1	cacti_1.1.12+ds1-1_all.deb

0.001 Low

EPSS

Percentile

36.2%

JSON

Related for DEBIANCVE:CVE-2017-10970