Patchwire CVEs, their patch status, and feeds to follow them

CVE-2017-16785

Fixed in a distro release EPSS <1%

Cacti 1.1.27 has reflected XSS via the PATH_INFO to host.php.

Published 2017-11-10 · CVE record · OSV

Products: cacti

Distro releases

ReleasePackageFixed in
Arch Linuxcacti1.1.28-1
Debian 12cacti1.1.27+ds1-3
Debian 13cacti1.1.27+ds1-3
Debian 14cacti1.1.27+ds1-3
openSUSE Tumbleweedcacti1.2.18-1.2