SB2020031330 - Stored cross-site scripting in cacti (Alpine package)

Description

This security bulletin contains information about 1 security vulnerability.

1) Stored cross-site scripting (CVE-ID: CVE-2020-7106)

The disclosed vulnerability allows a remote attacker to perform cross-site scripting (XSS) attacks.

The vulnerability exists due to insufficient sanitization of user-supplied data in the "description" parameter. A remote attacker can permanently inject and execute arbitrary HTML and script code in user's browser in context of vulnerable website.

Successful exploitation of this vulnerability may allow a remote attacker to steal potentially sensitive information, change appearance of the web page, perform phishing and drive-by-download attacks.

This vulnerability affects the following files:

• data_sources.php
• color_templates_item.php
• graphs.php
• graph_items.php
• lib/api_automation.php
• user_admin.php
• user_group_admin.php

Remediation

Install update from vendor's website.

References

• https://git.alpinelinux.org/aports/commit/?id=6e827a9dff0f6d940e08d7975d124a87392541de
• https://git.alpinelinux.org/aports/commit/?id=d257bf86303c111c0a6407903b162c596fb405de