Lucene search
HistoryAug 22, 2023 - 7:16 p.m.
CVE-2022-48547
cacti
cross-site scripting
remote attackers
auth_changepassword.php
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
43.0%
A reflected cross-site scripting (XSS) vulnerability in Cacti 0.8.7g and earlier allows unauthenticated remote attackers to inject arbitrary web script or HTML in the “ref” parameter at auth_changepassword.php.
Affected configurations
Node
cacticactiRange≤0.8.7g
References
Related
debiancve
debiancve
CVE-2022-48547
2023-08-22 19:16:31
cvelist
cvelist
CVE-2022-48547
2023-08-22 00:00:00
cve
cve
CVE-2022-48547
2023-08-22 19:16:31
ubuntucve
ubuntucve
CVE-2022-48547
2023-08-22 00:00:00
prion
prion
Cross site scripting
2023-08-22 19:16:00
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
43.0%
Related for NVD:CVE-2022-48547