WID-SEC-W-2024-3632

DeutschShown in its original language — a full translation is planned for a future version.

Cacti RRDtool: Mehrere Schwachstellen

view advisory published 2021-07-05

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Cacti RRDtool ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen oder Sicherheitsvorkehrungen zu umgehen.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-14424US	medium6.1	1.48% (74th)	—	2021-11-14
Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme.

references

External citations — patches, advisories, analysis.

Cacti Github Seite vom 2021-07-05external
Gentoo Linux Security Advisory GLSA-202412-02 vom 2024-12-07external
WID-SEC-W-2024-3632 - CSAF Versionself
WID-SEC-2024-3632 - Portal Versionself

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan