Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-50569
HistoryDec 22, 2023 - 12:00 a.m.

CVE-2023-50569

2023-12-2200:00:00
ubuntu.com
ubuntu.com
14
cve-2023-50569
reflected cross site scripting
privilege escalation
xml template file
cacti

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

30.2%

Reflected Cross Site Scripting (XSS) vulnerability in Cacti v1.2.25, allows
remote attackers to escalate privileges when uploading an xml template file
via templates_import.php.

Notes

Author Note
rodrigo-zaiden same as CVE-2023-50250.

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

30.2%