Description
Cross-site scripting (XSS) vulnerability in ntop allows remote attackers to inject arbitrary web script or HTML via the title parameter in a list action to plugins/rrdPlugin.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | ntop | No fix yet | — |
References
- openSUSE-SU-2015:0727 vendor-advisory
- 1030437 vdb-entry
- http://packetstormsecurity.com/files/127043/ntop-xss.txt
- 68002 vdb-entry
- MDVSA-2015:216 vendor-advisory
- http://advisories.mageia.org/MGASA-2015-0168.html