← back
CVE-2021-3816

CVE-2021-3816

EPSS 0.5%CWE-79
Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary HTML in the group_prefix field during the creation of a new group via "Copy" method at user_group_admin.php.
Affected products
n/a · Cacti

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://www.cacti.net/info/changelog