CVE-2017-1000032
Fixed in a distro release EPSS <1%
Cross-Site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote attackers to inject arbitrary web script or HTML via the parent_id parameter to tree.php and drp_action parameter to data_sources.php.
Products: cacti
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cacti | 0.8.8b+dfsg-6 |
| Debian 13 | cacti | 0.8.8b+dfsg-6 |
| Debian 14 | cacti | 0.8.8b+dfsg-6 |
| Ubuntu 14.04 LTS | cacti | 0.8.8b+dfsg-5ubuntu0.1 |