cacti - security update

Fixed packages 1

Vulnerabilities 8

• Unscored —
  CVE-2018-10060

  Cacti before 1.1.37 has XSS because it does not properly reject unintended characters, related to use of the sanitize_u…

  cacti cacti Debian Ubuntu
  Apr 12, 2018
• Unscored —
  CVE-2018-10061

  Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENT_QUOTES flag (these calls oc…

  cacti cacti Debian Ubuntu
  Apr 12, 2018
• Unscored —
  CVE-2019-11025

  In clearFilter() in utilities.php in Cacti before 1.2.3, no escaping occurs before printing out the value of the SNMP c…

  cacti cacti Debian Ubuntu
  Apr 8, 2019
• Unscored —
  CVE-2020-13230

  In Cacti before 1.2.11, disabling a user account does not immediately invalidate any permissions granted to that accoun…

  cacti cacti Debian Ubuntu
  May 20, 2020
• Unscored —
  CVE-2020-23226

  Multiple Cross Site Scripting (XSS) vulneratiblities exist in Cacti 1.2.12 in (1) reports_admin.php, (2) data_queries.p…

  cacti cacti Debian Ubuntu
  Aug 27, 2021
• Unscored —
  CVE-2020-7106

  Cacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items.php, lib/api_automati…

  cacti cacti cacti Debian Ubuntu Alpine
  Jan 16, 2020
• Unscored —
  CVE-2021-23225

  Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary web script or HTML in the …

  cacti cacti Debian Ubuntu
  Jan 19, 2022
• Unscored —
  CVE-2022-0730

  Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.

  cacti cacti cacti Debian Ubuntu Alpine
  Mar 3, 2022