SecuritySpace - CVE-2024-31444

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2024-31444

Description: Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, some of the data stored in `automation_tree_rules_form_save()` function in `automation_tree_rules.php` is not thoroughly checked and is used to concatenate the HTML statement in `form_confirm()` function from `lib/html.php` , finally resulting in cross-site scripting. Version 1.2.27 contains a patch for the issue.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2024-31444
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RBEOAFKRARQHTDIYSL723XAFJ2Q6624X/
https://github.com/Cacti/cacti/security/advisories/GHSA-p4ch-7hjw-6m87
https://github.com/Cacti/cacti/security/advisories/GHSA-p4ch-7hjw-6m87

CVE ID:	CVE-2024-31444
Description:	Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, some of the data stored in `automation_tree_rules_form_save()` function in `automation_tree_rules.php` is not thoroughly checked and is used to concatenate the HTML statement in `form_confirm()` function from `lib/html.php` , finally resulting in cross-site scripting. Version 1.2.27 contains a patch for the issue.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2024-31444 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RBEOAFKRARQHTDIYSL723XAFJ2Q6624X/ https://github.com/Cacti/cacti/security/advisories/GHSA-p4ch-7hjw-6m87 https://github.com/Cacti/cacti/security/advisories/GHSA-p4ch-7hjw-6m87