\" to successfully execute the JavaScript…","datePublished":"2022-01-19T20:38:53+00:00","dateModified":"2024-08-03T20:19:20.307000+00:00","inLanguage":"en","author":{"@type":"Organization","@id":"https://vexday.io/#org","name":"Vexday","url":"https://vexday.io","logo":{"@type":"ImageObject","url":"https://vexday.io/icon.png"}},"publisher":{"@type":"Organization","@id":"https://vexday.io/#org","name":"Vexday","url":"https://vexday.io","logo":{"@type":"ImageObject","url":"https://vexday.io/icon.png"}},"mainEntityOfPage":"https://vexday.io/en/cve/CVE-2021-26247","about":{"@type":"SoftwareApplication","name":"Cacti"},"keywords":"CVE-2021-26247, Cacti, CWE-79"}
CVE-2021-26247CWE-79

CVE-2021-26247: falha em Cacti

Publicada em · Atualizada em

18Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendepss 7.1%
probabilidade de exploração
7.1%top 6% das CVEs
exploração observada
nãonenhuma fonte reporta
As an unauthenticated remote user, visit "http://<CACTI_SERVER>/auth_changepassword.php?ref=<script>alert(1)</script>" to successfully execute the JavaScript payload present in the "ref" URL parameter.
Produtos afetados
n/a · Cacti