Patchwire CVEs, their patch status, and feeds to follow them

CVE-2017-15194

Fixed in a distro release EPSS 1%

include/global_session.php in Cacti 1.1.25 has XSS related to (1) the URI or (2) the refresh page.

Published 2017-10-10 · CVE record · OSV

Products: cacti

Distro releases

ReleasePackageFixed in
Debian 12cacti1.1.25+ds1-1
Debian 13cacti1.1.25+ds1-1
Debian 14cacti1.1.25+ds1-1
openSUSE Tumbleweedcacti1.2.18-1.2