NuytsTech Security

CVE-2017-15194

by ·

include/global_session.php in Cacti 1.1.25 has XSS related to (1) the URI or (2) the refresh page.

Date published : 2017-10-10

https://github.com/Cacti/cacti/commit/93f661d8adcfa6618b11522cdab30e97bada33fd

https://github.com/Cacti/cacti/issues/1010

Tags: