CVE-2023-50569 - Vulnerability Details

DO NOT USE THIS CVE RECORD. Consult IDs: CVE-2023-50250. Reason: This record is a reservation duplicate of CVE-2023-50250. Notes: All CVE users should reference CVE-2023-50250 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

References

No reference.

History

Thu, 15 Aug 2024 16:45:00 +0000

Type	Values Removed	Values Added
Weaknesses	CWE-79
CPEs	cpe:2.3:a:cacti:cacti:1.2.25:::::::*
Vendors & Products	Cacti Cacti cacti
References	https://gist.github.com/ISHGARD-2/a6b57de899f977e2af41780e7428b4bf https://github.com/Cacti/cacti/security/advisories/GHSA-xwqc-7jc4-xm73
Metrics	cvssV3_1 `{'score': 6.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N'}`

Thu, 15 Aug 2024 16:15:00 +0000

Type	Values Removed	Values Added
Description	Reflected Cross Site Scripting (XSS) vulnerability in Cacti v1.2.25, allows remote attackers to escalate privileges when uploading an xml template file via templates_import.php.	DO NOT USE THIS CVE RECORD. Consult IDs: CVE-2023-50250. Reason: This record is a reservation duplicate of CVE-2023-50250. Notes: All CVE users should reference CVE-2023-50250 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.