Cacti provides an operational monitoring and fault management framework. Prior to 1.2.27, some of the data stored in `form_save()` function in `data_queries.php` is not thoroughly checked and is used to concatenate the HTML statement in `grow_right_pane_tree()` function from `lib/html.php` , finally resulting in cross-site scripting. Version 1.2.27 contains a patch for the issue.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cacti | Aug 22, 2024 | May 13, 2024 |
| Debian | — | Upgrade cacti | Sep 2, 2024 | May 14, 2024 |
| Suse | — | Upgrade cactiUpgrade cacti-spine | Dec 5, 2025 | Sep 2, 2024 |
| Ubuntu | — | Upgrade cactiUpgrade cacti (Ubuntu Pro) | Aug 21, 2024 | May 14, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub