Aller au contenu
Se connecter
Non notée

CVE-2021-23225 Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary web script or HTML in the…

Description

Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary web script or HTML in the "new_username" field during creation of a new user via "Copy" method at user_admin.php.

Produits et versions touchés

Produit Versions touchées Corrigé en
Cacti 1.1.38 Pas de correctif indiqué

Autres CVE de Cacti

Les 3 CVE de Cacti →
CVE-2021-26247 As an unauthenticated remote user, visit "http:///auth_changepassword.php?ref=alert(1)" to successfully execute the… Non notée CVE-2021-3816 Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary HTML in the group_prefix… Non notée
Suivre cette CVE