CVE-2010-2545: XSS
Description:
templatesimport.php does not filter html metacharacters when importing xml template files. This may cause a persistent cross-site scripting when importing templates from untrusted sources.
How to reproduce:
/cacti/templatesimport.php:
Import a template file with a specially crafted <name>...</name> tag, such as shown here.
<cacti> <hash000016fe5edd777a76d48fc48c11aded5211ef> <name> Unix - Load Average<![CDATA[<script>alert(document.cookie)</script>]]> </name> ...
Other sources
Multiple cross-site scripting (XSS) vulnerabilities in Cacti before 0.8.7g, as used in Red Hat High Performance Computing (HPC) Solution and other products, allow remote attackers to inject arbitrary web script or HTML via (1) the name element in an XML template to templatesimport.php; and allow remote authenticated administrators to inject arbitrary web script or HTML via vectors related to (2) cdef.php, (3) datainput.php, (4) dataqueries.php, (5) datasources.php, (6) datatemplates.php, (7) gprintpresets.php, (8) graph.php, (9) graphsnew.php, (10) graphs.php, (11) graphtemplatesinputs.php, (12) graphtemplatesitems.php, (13) graphtemplates.php, (14) graphview.php, (15) host.php, (16) hosttemplates.php, (17) lib/functions.php, (18) lib/htmlform.php, (19) lib/htmlformtemplate.php, (20) lib/html.php, (21) lib/htmltree.php, (22) lib/rrd.php, (23) rra.php, (24) tree.php, and (25) useradmin.php.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2545?
CVE-2010-2545 has a medium severity rating due to the potential for persistent cross-site scripting vulnerabilities.
How do I fix CVE-2010-2545?
To fix CVE-2010-2545, ensure you upgrade to a version of Cacti that has addressed this vulnerability, such as 1.2.16+ds1-2+deb11u3 or later.
What are the affected versions of Cacti related to CVE-2010-2545?
CVE-2010-2545 affects multiple Cacti versions, including 0.5, 0.6, and from 0.8.1 to 0.8.7f.
What type of vulnerability is CVE-2010-2545?
CVE-2010-2545 is categorized as a cross-site scripting (XSS) vulnerability.
Can CVE-2010-2545 be exploited through template imports?
Yes, CVE-2010-2545 can be exploited by importing untrusted XML template files through templates_import.php.