Skip to content

Color Templates are vulnerable to XSS attack #4679

Closed
Closed
Color Templates are vulnerable to XSS attack#4679
Labels
SECURITYA security issue reported through CVEbugUndesired behaviourresolvedA fixed issue
Milestone
v1.2.20

Description

@TheWitness
TheWitness
opened on Apr 4, 2022

Describe the bug

It is possible to perform an XSS on the Color Templates page due to a lack of bounds checking of the Name column.

Expected behavior

More secure Cacti

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    SECURITYA security issue reported through CVEbugUndesired behaviourresolvedA fixed issue

    Type

    No type

    Projects

    No projects

      Milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions