CVE-2020-25706: 
Cacti vulnerability analysis and mitigation

A cross-site scripting (XSS) vulnerability was identified in Cacti version 1.2.13, specifically in the templates_import.php file. The vulnerability (CVE-2020-25706) was discovered due to improper escaping of error messages during template import preview in the xml_path field. The issue was reported on July 24, 2020, and affects Cacti installations up to version 1.2.13 (GitHub Issue, NVD).

The vulnerability stems from insufficient input validation and improper escaping of error messages in the template import preview functionality. The issue specifically occurs in the xml_path field processing. The vulnerability has been assigned a CVSS v3.1 base score of 6.1 (MEDIUM) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N according to NVD's assessment (NVD).

The vulnerability could be exploited by an attacker to execute cross-site scripting attacks by forcing a user to upload a file with a 'name' or 'xml_path' containing malicious client-side code. This could potentially lead to information disclosure and compromise of user sessions (GitHub Issue, Debian Advisory).

The vulnerability can be exploited by manipulating the template import preview functionality. An attacker would need to craft a malicious file with specific content in the name or xml_path fields to trigger the XSS condition (GitHub Issue).

The vulnerability was patched in Cacti version 1.2.14 through proper escaping of error messages. The fix involved implementing proper HTML escaping for filename output and error messages in the template import functionality. Users are advised to upgrade to version 1.2.14 or later to address this vulnerability (GitHub Commit).