CVE-2019-11025: In clearFilter() in utilities.php in Cacti before 1.2.3, no escaping occurs before printing out the value of the SNMP community string (SNMP Options) in the…

PriorityP423medium5.4CVSS 3.1

AVNACLPRLUIRSCCLILAN

EPSS

1.33%

68.1th percentile

In clearFilter() in utilities.php in Cacti before 1.2.3, no escaping occurs before printing out the value of the SNMP community string (SNMP Options) in the View poller cache, leading to XSS.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
cacti	cacti	< 1.2.3	1.2.3
cacti	cacti	>= 0 < 1.2.2+ds1-2	1.2.2+ds1-2
cacti	cacti	>= 0 < 1.2.2+ds1-2	1.2.2+ds1-2
cacti	cacti	>= 0 < 1.2.2+ds1-2	1.2.2+ds1-2
cacti	cacti	>= 0 < 1.2.2+ds1-2	1.2.2+ds1-2
debian	cacti	< cacti 1.2.2+ds1-2 (bookworm)	cacti 1.2.2+ds1-2 (bookworm)
debian	debian_linux	—	—
debian	debian_linux	—	—

CVSS provenance

nvdv3.15.4MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

nvdv2.03.5LOWAV:N/AC:M/Au:S/C:N/I:P/A:N

osv5.4MEDIUM

vendor_debian5.4LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.