CVE-2018-20725: XSS
Published Jan 16, 2019
·Updated
A cross-site scripting (XSS) vulnerability exists in graphtemplates.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Graph Vertical Label.
Affected Software
1 affected component
Cacti Cacti<1.2.0
Remediation
Event History
Jan 16, 2019
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this XSS vulnerability in Cacti?
The vulnerability ID of this XSS vulnerability in Cacti is CVE-2018-20725.
2
What is the affected version of Cacti?
The affected version of Cacti is version up to but not including 1.2.0.
3
What is the severity rating of CVE-2018-20725?
The severity rating of CVE-2018-20725 is medium.
4
What is the CWE ID of this vulnerability?
The CWE ID of this vulnerability is CWE-79.
5
How can I fix this XSS vulnerability in Cacti?
To fix this XSS vulnerability in Cacti, upgrade to version 1.2.0 or later.