CVE-2018-20723: XSS
Published Jan 16, 2019
·Updated
A cross-site scripting (XSS) vulnerability exists in colortemplates.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Name field for a Color.
Affected Software
1 affected component
Cacti Cacti<1.2.0
Remediation
Event History
Jan 16, 2019
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is CVE-2018-20723?
CVE-2018-20723 is a cross-site scripting (XSS) vulnerability in Cacti before 1.2.0.
2
What is the severity of CVE-2018-20723?
The severity of CVE-2018-20723 is medium with a CVSS score of 4.8.
3
How does CVE-2018-20723 affect Cacti?
CVE-2018-20723 affects Cacti versions before 1.2.0 by allowing cross-site scripting attacks due to lack of character escaping in the Name field for a Color.
4
How can I fix CVE-2018-20723?
To fix CVE-2018-20723, upgrade to Cacti version 1.2.0 or later.
5
What is the Common Weakness Enumeration (CWE) ID for CVE-2018-20723?
The CWE ID for CVE-2018-20723 is CWE-79.