CVE-2020-25706: XSS
Published Nov 12, 2020
·Updated
A cross-site scripting (XSS) vulnerability exists in templatesimport.php (Cacti 1.2.13) due to Improper escaping of error message during template import preview in the xmlpath field
Affected Software
2 affected components
Cacti Cacti=1.2.13
Debian Debian Linux=10.0
Remediation
Patch Available
Event History
Nov 12, 2020
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2020-25706?
CVE-2020-25706 is a cross-site scripting (XSS) vulnerability in templates_import.php in Cacti 1.2.13.
2
How does CVE-2020-25706 affect Cacti?
CVE-2020-25706 affects Cacti version 1.2.13.
3
What is the severity of CVE-2020-25706?
The severity of CVE-2020-25706 is medium with a CVSS score of 6.1.
4
How can I fix CVE-2020-25706?
To fix CVE-2020-25706, you should update Cacti to version 1.2.14 or later.
5
Where can I find more information about CVE-2020-25706?
You can find more information about CVE-2020-25706 on Red Hat's Bugzilla and GitHub Cacti repository.