CVE-2020-25706
Description
A Cross-site scripting (XSS) flaw was found in Cacti in the templates_import.php, caused by an improper escaping of error message during the template import preview in the xml_path field. The highest threat from this vulnerability is to confidentiality and integrity.
Statement
Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references.
Acknowledgements
Red Hat would like to thank listerjoe for reporting this issue.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
