{"id":"CVE-2020-14424","aliases":["DEBIAN-CVE-2020-14424","EUVD-2020-6563","GHSA-5gvx-jvhg-chfx","UBUNTU-CVE-2020-14424","USN-5214-1","openSUSE-SU-2021:1190-1","openSUSE-SU-2021:1208-1","openSUSE-SU-2024:10670-1"],"status":"published","title":"Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter...","description":"Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01481,"percentile":0.74164,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-79"],"published":"2021-08-25T15:55:18Z","modified":"2026-10-26T12:01:37Z","fixes":[{"ecosystem":"Debian:12","package":"cacti","fixed_in":["1.2.19+ds1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"cacti","fixed_in":["1.2.19+ds1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cacti","fixed_in":["1.2.19+ds1-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"cacti","fixed_in":["1.1.38+ds1-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"cacti","fixed_in":["1.2.10+ds1-1ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 12","package":"cacti","fixed_in":["1.2.18-bp153.2.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 12","package":"cacti-spine","fixed_in":["1.2.18-bp153.2.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP3","package":"cacti","fixed_in":["1.2.18-bp153.2.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP3","package":"cacti-spine","fixed_in":["1.2.18-bp153.2.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"cacti","fixed_in":["1.2.18-bp153.2.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"cacti-spine","fixed_in":["1.2.18-bp153.2.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"cacti","fixed_in":["1.2.18-bp153.2.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"cacti-spine","fixed_in":["1.2.18-bp153.2.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP2","package":"cacti","fixed_in":["1.2.18-bp152.2.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP2","package":"cacti-spine","fixed_in":["1.2.18-bp152.2.10.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.19+ds1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.19+ds1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.19+ds1-1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.38+ds1-1ubuntu0.1~esm1"}]}],"versions":["1.1.18+ds1-1","1.1.27+ds1-2","1.1.27+ds1-3","1.1.28+ds1-2","1.1.35+ds1-1","1.1.36+ds1-1","1.1.38+ds1-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.10+ds1-1ubuntu1+esm1"}]}],"versions":["1.2.4+ds1-2ubuntu3","1.2.9+ds1-1ubuntu1","1.2.9+ds1-1ubuntu2","1.2.10+ds1-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.8f+ds1-4ubuntu4.16.04.2+esm1"}]}],"versions":["0.8.8f+ds1-2","0.8.8f+ds1-3","0.8.8f+ds1-4","0.8.8f+ds1-4ubuntu1","0.8.8f+ds1-4ubuntu2","0.8.8f+ds1-4ubuntu3","0.8.8f+ds1-4ubuntu4","0.8.8f+ds1-4ubuntu4.16.04","0.8.8f+ds1-4ubuntu4.16.04.1","0.8.8f+ds1-4ubuntu4.16.04.2"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.38+ds1-1ubuntu0.1~esm1"}]}],"versions":["1.1.18+ds1-1","1.1.27+ds1-2","1.1.27+ds1-3","1.1.28+ds1-2","1.1.35+ds1-1","1.1.36+ds1-1","1.1.38+ds1-1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.10+ds1-1ubuntu1+esm1"}]}],"versions":["1.2.4+ds1-2ubuntu3","1.2.9+ds1-1ubuntu1","1.2.9+ds1-1ubuntu2","1.2.10+ds1-1ubuntu1"],"bundled":5},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.18-bp153.2.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"cacti-spine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.18-bp153.2.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP3","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.18-bp153.2.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP3","package":"cacti-spine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.18-bp153.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.18-bp153.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"cacti-spine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.18-bp153.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.18-bp153.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"cacti-spine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.18-bp153.2.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP2","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.18-bp152.2.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP2","package":"cacti-spine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.18-bp152.2.10.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.18-1.2"}]}],"bundled":31}],"products":[{"vendor":"cacti","product":"cacti"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2001016","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://github.com/Cacti/cacti/pull/4261","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14424"},{"url":"https://github.com/advisories/GHSA-5gvx-jvhg-chfx"},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-14424","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-14424","tags":["report"]},{"url":"https://github.com/Cacti/cacti/commit/d12800ab479ad95a091bc577f28fd99ec95eb64c","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5214-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-14424","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-13230","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-13231","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-14295","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-35701","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JBZLNMUSFBOJOEX22NOPCJOWBJDHPBAA/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1188188","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14424","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2NZJSSIG6ZIT5F2CRYU4MLRUHPBV6XTL/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-6799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16660","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16661","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8813","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-14424","description":"Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme.","status":"published","published":"2021-11-14T19:48:18Z","modified":"2024-08-04T12:46:34.562Z","updated_at":"2026-11-02T14:35:46.476719Z"}],"euvd":[{"id":"EUVD-2020-6563","description":"Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme.","status":"published","published":"2021-11-14T19:48:18Z","modified":"2024-08-04T12:46:34Z","updated_at":"2026-11-03T03:07:34.099541Z"}],"ghsa":[{"id":"GHSA-5gvx-jvhg-chfx","title":"Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter...","description":"Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme.","status":"published","published":"2022-05-24T19:20:39Z","modified":"2023-01-30T05:03:54Z","cwes":["CWE-79"],"updated_at":"2026-11-02T14:46:56.128795Z"}],"nvd":[{"id":"CVE-2020-14424","description":"Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme.","status":"published","published":"2021-11-14T20:15:07.477Z","modified":"2026-06-17T02:54:44.47Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:06:46.101987Z"}],"osv":[{"id":"CVE-2020-14424","description":"Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme.","status":"published","published":"2021-11-14T20:15:07.477Z","modified":"2026-10-20T10:51:50.351822572Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:14.418339Z"},{"id":"DEBIAN-CVE-2020-14424","description":"Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme.","status":"published","published":"2021-11-14T20:15:07.477Z","modified":"2026-10-26T12:01:37.426112594Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:33.384087Z"},{"id":"UBUNTU-CVE-2020-14424","description":"Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme.","status":"published","published":"2021-11-14T20:15:00Z","modified":"2026-02-04T02:28:58.661534Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:22.804634Z"},{"id":"openSUSE-SU-2021:1190-1","title":"Security update for cacti, cacti-spine","description":"This update for cacti, cacti-spine fixes the following issues:\n\ncacti-spine 1.2.18:\n\n* Fix missing time parameter on FROM_UNIXTIME function\n\ncacti 1.2.18:\n\n* CVE-2020-14424: Lack of escaping on template import can lead to\n  XSS exposure under 'midwinter' theme (boo#1188188)\n* Real time graphs can expose XSS issue\n","status":"published","published":"2021-08-25T15:55:18Z","modified":"2026-02-04T03:30:11.738079Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:1208-1","title":"Security update for cacti, cacti-spine","description":"This update for cacti, cacti-spine fixes the following issues:\n\ncacti-spine 1.2.18:\n\n* Fix missing time parameter on FROM_UNIXTIME function\n\ncacti 1.2.18:\n\n* CVE-2020-14424: Lack of escaping on template import can lead to\n  XSS exposure under 'midwinter' theme (boo#1188188)\n* Real time graphs can expose XSS issue\n\nThis update was imported from the openSUSE:Leap:15.2:Update update project.","status":"published","published":"2021-08-28T22:07:30Z","modified":"2026-02-04T04:28:03.430303Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2024:10670-1","title":"cacti-1.2.18-1.2 on GA media","description":"These are all security issues fixed in the cacti-1.2.18-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:13:56.743451Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"USN-5214-1","title":"cacti vulnerabilities","description":"It was discovered that Cacti was incorrectly validating permissions\nfor user accounts that had been recently disabled. An authenticated\nattacker could possibly use this to obtain unauthorized access to\napplication and system data. (CVE-2020-13230)\n\nIt was discovered that Cacti was incorrectly performing authorization\nchecks in auth_profile.php. A remote unauthenticated attacker could\nuse this to perform a CSRF attack and set a new admin email or make\nother changes. This issue only affected Ubuntu 18.04 ESM and\nUbuntu 20.04 ESM. (CVE-2020-13231)\n\nIt was discovered that Cacti incorrectly handled user provided input\nsent through request parameters to the color.php script. A remote\nauthenticated attacker could use this issue to perform SQL injection\nattacks. This issue only affected Ubuntu 18.04 ESM and Ubuntu 20.04 ESM.\n(CVE-2020-14295)\n\nIt was discovered that Cacti did not properly escape file input fields\nwhen performing template import operations for various themes. An\nauthenticated attacker could use this to perform XSS attacks. This issue\nonly affected Ubuntu 18.04 ESM and Ubuntu 20.04 ESM. (CVE-2020-14424)\n\nIt was discovered that Cacti incorrectly handled user provided input\nsent through request parameters to the data_debug.php script. A remote\nauthenticated attacker could use this issue to perform SQL injection\nattacks. This issue only affected Ubuntu 20.04 ESM. (CVE-2020-35701)\n","status":"published","published":"2022-06-09T09:14:15Z","modified":"2026-06-25T13:30:55.043665956Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}