CVE-2017-1000032: XSS
Published Jul 13, 2017
·Updated
Cross-Site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote attackers to inject arbitrary web script or HTML via the parentid parameter to tree.php and drpaction parameter to datasources.php.
Affected Software
1 affected component
Cacti Cacti=0.8.8b
Event History
Jul 13, 2017
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-1000032?
CVE-2017-1000032 has a high severity rating due to its potential for remote code execution via XSS.
2
How do I fix CVE-2017-1000032?
To fix CVE-2017-1000032, update Cacti to the latest version that addresses this vulnerability.
3
What types of attacks does CVE-2017-1000032 enable?
CVE-2017-1000032 enables remote attackers to execute arbitrary web scripts or HTML content in the context of the victim's session.
4
Which versions of Cacti are affected by CVE-2017-1000032?
CVE-2017-1000032 specifically affects Cacti version 0.8.8b.
5
What parameters are involved in the CVE-2017-1000032 vulnerability?
CVE-2017-1000032 involves the 'parent_id' parameter in tree.php and the 'drp_action' parameter in data_sources.php.