CVE-2021-23225

5.4

MEDIUMCVSS v3

Published

January 19, 2022

CVSS v2

3.5 LOW

Affected

3 projects

Assigned by

Red Hat

Severity scale

010

Description

Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary web script or HTML in the "new_username" field during creation of a new user via "Copy" method at user_admin.php.

Cacti/cacti

GitHubCacti ™

= 1.1.38NVD

cacti

Python Package IndexThis is a torch data load package.

= 1.1.38NVD

cacti

NPM

More on this CVE

NVD↗GitHub Advisory↗

Extremely simple MongoDB/Redis backups to Amazon S3 with encryption and compression'

= 1.1.38NVD

Security Advisories

CVE-2021-23225

Description

More on this CVE