CVE-2019-11025

In clearFilter() in utilities.php in Cacti before 1.2.3, no escaping occurs before printing out the value of the SNMP community string (SNMP Options) in the…

published April 8, 2019

CVSS
—
EPSS
1%
Percentile
70.6
In the wild
Unconfirmed
What it is

In clearFilter() in utilities.php in Cacti before 1.2.3, no escaping occurs before printing out the value of the SNMP community string (SNMP Options) in the View poller cache, leading to XSS.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01318 · 70.6th percentile
Published
2019-04-08T22:20Z
EPSS history
Timeline
  • 08 APR 22:20Z
    In clearFilter() in utilities.php in Cacti before 1.2.3, no escaping occurs before printing out the value of the SNMP community string (SNMP Options) in the…
    cvelistv5