CVE-2024-27082
High
Description
Cacti provides an operational monitoring and fault management framework. Versions of Cacti prior to 1.2.27 are vulnerable to stored cross-site scripting, a type of cross-site scripting where malicious scripts are permanently stored on a target server and served to users who access a particular page. Version 1.2.27 contains a patch for the issue.
SeverityHigh
CVSS7.6
Exploit probability—
ProductCacti
PublishedMay 14, 2024
First seenMay 14, 2024
Weakness typeCWE-79Cross-site scripting (XSS)
How to fix
Update
- cacti cacti1.2.27 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cacti cacti | v < 1.2.27 | 1.2.27 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.