CVE-2011-5223 — Cross-site Scripting in Cacti

CWE-79 — Cross-site Scripting4 documents4 sources
Severity
4.3MEDIUMNVD
EPSS
0.5%
top 36.23%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
CactiDebian Cacti
Timeline
PublishedOct 25
Latest updateMay 17

Description

Cross-site request forgery (CSRF) vulnerability in logout.php in Cacti before 0.8.7i allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages3 packages

▶debiandebian/cacti< cacti 0.8.7i-1 (bookworm)
▶Debiancacti/cacti< 0.8.7i-1+3
▶NVDcacti/cacti0.8.7h+38

🔴Vulnerability Details

2
GHSA
GHSA-v49p-p426-xv6r: Cross-site request forgery (CSRF) vulnerability in logout↗2022-05-17
▶
OSV
CVE-2011-5223: Cross-site request forgery (CSRF) vulnerability in logout↗2012-10-25
▶

📋Vendor Advisories

1
Debian
CVE-2011-5223: cacti - Cross-site request forgery (CSRF) vulnerability in logout.php in Cacti before 0....↗2011
▶