[v3.0] cacti: SQL Injection and Location header injection from cdef id (CVE-2015-4342)
Bug:
Unspecified SQL Injection and Location header injection vulnerability has been reported and fixed in Cacti.
Fix:
Cacti 0.8.8d
Reference:
https://bugzilla.redhat.com/show\_bug.cgi?id=CVE-2015-4342
(from redmine: issue id 4359, created on 2015-06-15, closed on 2015-06-16)
- Relations:
- parent #4356 (closed)
- Changesets:
- Revision ab2ca614 by Natanael Copa on 2015-06-15T13:26:33Z:
main/cacti: security upgrade to 0.8.8d (CVE-2015-4342)
fixes #4359