Aller au contenu
Se connecter
Non notée

CVE-2021-3816 Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary HTML in the group_prefix…

Description

Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary HTML in the group_prefix field during the creation of a new group via "Copy" method at user_group_admin.php.

Produits et versions touchés

Produit Versions touchées Corrigé en
Cacti 1.1.38 Pas de correctif indiqué

Autres CVE de Cacti

Les 3 CVE de Cacti →
CVE-2021-26247 As an unauthenticated remote user, visit "http:///auth_changepassword.php?ref=alert(1)" to successfully execute the… Non notée CVE-2021-23225 Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary web script or HTML in the… Non notée
Suivre cette CVE