lib/html.php in Cacti before 1.1.18 has XSS via the title field of an external link added by an authenticated user.

A cross-site scripting vulnerability exists in Cacti in the method parameter in spikekill.php. (CVE-2017-12927)

The lib/html.php script in Cacti has a XSS vulnerability via the title field of an external link added by an authenticated user.
(CVE-2017-12978)

This update for cacti and cacti-spine fixes security issues and bugs.

The following vulnerabilities were fixed :

  - CVE-2017-12927: Cross-site scripting vulnerability in     methodparameter (bsc#1054390)

  - CVE-2017-12978:Cross-site scripting vulnerability via     the title field (bsc#1054742) It also contains all     upstream bug fixes and improvements in the 1.1.18     release :

  - Sort devices by polling time to allow long running d

  - Allow user to hide Graphs from disabled Devices

  - Create a separate Realm for Realtime Graphs

  - Fix various JavaScript errors

  - updated translations

  - Can now export Device table results to CSV

  - Allow Log Rotation to be other than Daily, and other log     rotation improvements

- Update to 1.1.19

Release notes: https://www.cacti.net/release_notes.php?version=1.1.19

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
103601	Amazon Linux AMI : cacti (ALAS-2017-904)	Nessus	Amazon Linux Local Security Checks	medium
102969	openSUSE Security Update : cacti / cacti-spine (openSUSE-2017-999)	Nessus	SuSE Local Security Checks	medium
102901	Fedora 26 : cacti (2017-c0cdc6ebdd)	Nessus	Fedora Local Security Checks	medium
102893	Fedora 25 : cacti (2017-2f1ca6beb7)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2017-12978

medium

Tenable Plugins

medium

medium

medium

medium