Description

Cacti provides an operational monitoring and fault management framework. A reflected cross-site scripting vulnerability on the 1.3.x DEV branch allows attackers to obtain cookies of administrator and other users and fake their login using obtained cookies. This issue is fixed in commit a38b9046e9772612fda847b46308f9391a49891e.

INFO

Published Date :

2024-05-13T14:56:18.471Z

Last Modified :

2024-08-02T01:32:06.680Z

Source :

GitHub_M
AFFECTED PRODUCTS

The following products are affected by CVE-2024-30268 vulnerability.

Vendors Products
Cacti
  • Cacti
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-30268.

URL Resource
https://github.com/Cacti/cacti/blob/08497b8bcc6a6037f7b1aae303ad8f7dfaf7364e/settings.php#L66 cve-icon cve-icon cve-icon
https://github.com/Cacti/cacti/commit/a38b9046e9772612fda847b46308f9391a49891e cve-icon cve-icon cve-icon
https://github.com/Cacti/cacti/security/advisories/GHSA-9m3v-whmr-pc2q cve-icon cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact