Lucene search
+L

10 matches found

SUSE CVE
SUSE CVE
•added 2026/05/21 2:45 a.m.•26 views

SUSE CVE-2024-43365

Cacti is an open source performance and fault management framework. Theconsolenewsection parameter is not properly sanitized when saving external links in links.php . Morever, the said consolenewsection parameter is stored in the database and reflected back to user in index.php, finally leading t...

8.2CVSS7.2AI score0.25068EPSS
SaveExploits1References3
OSV
OSV
•added 2024/10/07 9:15 p.m.•5 views

DEBIAN-CVE-2024-43365

Cacti is an open source performance and fault management framework. Theconsolenewsection parameter is not properly sanitized when saving external links in links.php . Morever, the said consolenewsection parameter is stored in the database and reflected back to user in index.php, finally leading t...

8.2CVSS5.2AI score0.25068EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/10/07 8:38 p.m.•33 views

CVE-2024-43365 Stored Cross-site Scripting (XSS) when creating external links in Cacti

Cacti is an open source performance and fault management framework. Theconsolenewsection parameter is not properly sanitized when saving external links in links.php . Morever, the said consolenewsection parameter is stored in the database and reflected back to user in index.php, finally leading t...

5.7CVSS0.25068EPSS
SaveExploits1References1
CVE
CVE
•added 2024/10/07 8:38 p.m.•90 views

CVE-2024-43365

CVE-2024-43365 affects Cacti. The issue is a stored XSS in the consolenewsection parameter when creating external links (links.php), which is saved in the database and reflected in index.php. Exploitation requires user privileges to create external links; input is stored and displayed without pro...

8.2CVSS5.8AI score0.25068EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/10/07 8:38 p.m.•21 views

CVE-2024-43365 Stored Cross-site Scripting (XSS) when creating external links in Cacti

Cacti is an open source performance and fault management framework. Theconsolenewsection parameter is not properly sanitized when saving external links in links.php . Morever, the said consolenewsection parameter is stored in the database and reflected back to user in index.php, finally leading t...

5.7CVSS5.4AI score0.25068EPSS
SaveExploits1References1
OSV
OSV
•added 2024/10/07 8:38 p.m.•24 views

CVE-2024-43365 Stored Cross-site Scripting (XSS) when creating external links in Cacti

Cacti is an open source performance and fault management framework. Theconsolenewsection parameter is not properly sanitized when saving external links in links.php . Morever, the said consolenewsection parameter is stored in the database and reflected back to user in index.php, finally leading t...

5.7CVSS5.9AI score
SaveExploits0References4
Mend
Mend
•added 2024/10/07 8:38 p.m.•1 views

CVE-2024-43365

Cacti is an open source performance and fault management framework. Theconsolenewsection parameter is not properly sanitized when saving external links in links.php . Morever, the said consolenewsection parameter is stored in the database and reflected back to user in index.php, finally leading t...

8.2CVSS0.25068EPSS
SaveExploits1References5
AlpineLinux
AlpineLinux
•added 2024/10/07 8:38 p.m.•28 views

CVE-2024-43365

Cacti is an open source performance and fault management framework. Theconsolenewsection parameter is not properly sanitized when saving external links in links.php . Morever, the said consolenewsection parameter is stored in the database and reflected back to user in index.php, finally leading t...

8.2CVSS6.1AI score0.25068EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/10/07 12:00 a.m.•10 views

PT-2024-7759 · Cacti · Cacti

Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 1.2.28 Description: The issue arises from the improper sanitization of the consolenewsection parameter when saving external links in links.php, which is then stored in the database and reflected back to the user in...

10CVSS7.6AI score0.54024EPSS
SaveExploits25References47
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/07 12:00 a.m.•2 views

CVE-2024-43365: Improper Neutralization of Input During Web Page Generation

Cacti is an open source performance and fault management framework. Theconsolenewsection parameter is not properly sanitized when saving external links in links.php . Morever, the said consolenewsection parameter is stored in the database and reflected back to user in index.php, finally leading t...

8.2CVSS7.3AI score0.25068EPSS
SaveExploits1References1
Rows per page
Query Builder