CVE-2022-48547

Summary

CVE-2022-48547 is a reflected cross-site scripting (XSS) vulnerability affecting Cacti 0.8.7g and earlier versions. Unauthenticated attackers can exploit this issue by injecting arbitrary web scripts or HTML code into the "ref" parameter at auth_changepassword.php. Successful exploitation could lead to the execution of malicious code in the context of the targeted user, potentially resulting in unauthorized access or data theft. Users are advised to update their Cacti installations to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.