Medium severity5.4NVD Advisory· Published Jul 27, 2017· Updated Jun 17, 2026
CVE-2017-11691
CVE-2017-11691
Description
Cross-site scripting (XSS) vulnerability in auth_profile.php in Cacti 1.1.13 allows remote attackers to inject arbitrary web script or HTML via specially crafted HTTP Referer headers.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:cacti:cacti:1.1.13:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cacti:cacti:1.1.13:*:*:*:*:*:*:*
- (no CPE)range: <1.1.13
Patches
Vulnerability mechanics
References
4- github.com/Cacti/cacti/commit/104090aeead4aa433bf1f18cd6d52dcfeb71236cnvdPatch
- github.com/Cacti/cacti/issues/867nvdExploitThird Party Advisory
- www.securityfocus.com/bid/100022nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1038982nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.