| |
Vulnerability CVE-2023-49086
Published: 2023-12-22
| Description: |
Cacti is a robust performance and fault management framework and a frontend to RRDTool - a Time Series Database (TSDB). Bypassing an earlier fix (CVE-2023-39360) that leads to a DOM XSS attack.
Exploitation of the vulnerability is possible for an authorized user. The vulnerable component is
the `graphs_new.php`. Impact of the vulnerability - execution of arbitrary javascript code in
the attacked user's browser. This issue has been patched in version 1.2.26.
|
Type:
CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
References: |
https://github.com/Cacti/cacti/security/advisories/GHSA-wc73-r2vw-59pr
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
