FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

cacti -- Cross Site Scripting issue

Affected packages
cacti < 1.1.26

Details

VuXML ID e1cb9dc9-daa9-44db-adde-e94d900e2f7f
Discovery 2017-10-10
Entry 2017-10-19

cacti developers report:

The file include/global_session.php in Cacti 1.1.25 has XSS related to (1) the URI or (2) the refresh page.

References

CVE Name CVE-2017-15194
URL http://www.securitytracker.com/id/1039569
URL https://github.com/Cacti/cacti/commit/93f661d8adcfa6618b11522cdab30e97bada33fd
URL https://github.com/Cacti/cacti/issues/1010