CVE-2022-41444: XSS
Published Aug 22, 2023
·Updated
Cross Site Scripting (XSS) vulnerability in Cacti 1.2.21 via crafted POST request to graphsnew.php.
Affected Software
5 affected componentsFixes available
Cacti Cacti=1.2.21
debian/cacti<1.2.22+ds1-1
1.2.22+ds1-1
debian/cacti<1.2.22+ds1-1
1.2.22+ds1-1
debian/cacti<1.2.22+ds1-1
1.2.22+ds1-1
debian/cacti
1.2.24+ds1-1+deb12u51.2.30+ds1-11.2.31+ds1-4
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/cactito a version that resolves this vulnerability.Fixed in 1.2.24+ds1-1+deb12u5Fixed in 1.2.30+ds1-1Fixed in 1.2.31+ds1-4 - Upgrade
Upgrade
debian/cactito a version that resolves this vulnerability.Fixed in 1.2.22+ds1-1
Event History
Aug 22, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:16 PM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·07:16 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this XSS vulnerability?
The vulnerability ID of this XSS vulnerability is CVE-2022-41444.
2
What is the severity of CVE-2022-41444?
CVE-2022-41444 has a severity level of medium.
3
How does the XSS vulnerability in Cacti 1.2.21 occur?
The XSS vulnerability in Cacti 1.2.21 occurs through a crafted POST request to graphs_new.php.
4
Which version of Cacti is affected by this XSS vulnerability?
This XSS vulnerability affects version 1.2.21 of Cacti.
5
Is there a fix or patch available for CVE-2022-41444?
Currently, there is no fix or patch available for CVE-2022-41444. It is recommended to follow vendor advisories for updates.