Lucene search
PRIOn knowledge basePRION:CVE-2018-20726HistoryJan 16, 2019 - 4:29 p.m.
Cross site scripting
2019-01-1616:29:00
PRIOn knowledge base
www.prio-n.com
4
0.001 Low
EPSS
Percentile
43.6%
A cross-site scripting (XSS) vulnerability exists in host.php (via tree.php) in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Website Hostname field for Devices.
References
lists.opensuse.org/opensuse-security-announce/2020-03/msg00001.html
lists.opensuse.org/opensuse-security-announce/2020-03/msg00005.html
lists.opensuse.org/opensuse-security-announce/2020-04/msg00042.html
lists.opensuse.org/opensuse-security-announce/2020-04/msg00048.html
github.com/Cacti/cacti/blob/develop/CHANGELOG
github.com/Cacti/cacti/commit/80c2a88fb2afb93f87703ba4641f9970478c102d
github.com/Cacti/cacti/issues/2213
Related
cvelist
cvelist
CVE-2018-20726
2019-01-16 16:00:00
ubuntucve
ubuntucve
CVE-2018-20726
2019-01-16 00:00:00
debiancve
debiancve
CVE-2018-20726
2019-01-16 16:29:00
osv
osv
CVE-2018-20726
2019-01-16 16:29:00
cve
cve
CVE-2018-20726
2019-01-16 16:29:00
nvd
nvd
CVE-2018-20726
2019-01-16 16:29:00
openvas
openvas
Cacti < 1.2.0 Multiple XSS Vulnerabilities - Linux
2019-01-18 00:00:00
Cacti < 1.2.0 Multiple XSS Vulnerabilities - Windows
2019-01-18 00:00:00
openSUSE: Security Advisory for cacti, (openSUSE-SU-2020:0272-1)
2020-03-02 00:00:00
suse
suse
Security update for cacti, cacti-spine (important)
2020-03-01 00:00:00
Security update for cacti, cacti-spine (important)
2020-03-02 00:00:00
Security update for cacti, cacti-spine (important)
2020-04-28 00:00:00
nessus
nessus
openSUSE Security Update : cacti / cacti-spine (openSUSE-2020-272)
2020-03-02 00:00:00
openSUSE Security Update : cacti / cacti-spine (openSUSE-2020-558)
2020-04-29 00:00:00