PT-2023-4992 · Cacti+1 · Cacti+1
Vissamoutafis
·
Publicado
2023-09-05
·
Atualizado
2025-01-24
·
CVE-2023-39366
CVSS v2.0
7.7
Alta
| Vetor | AV:N/AC:L/Au:M/C:C/I:C/A:N |
Name of the Vulnerable Software and Affected Versions
Cacti versions prior to 1.2.25
Description
Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting (XSS) Vulnerability that allows an authenticated user to poison data stored in the cacti 's database. These data will be viewed by administrative cacti accounts and execute JavaScript code in the victim's browser at view-time. The
data sources.php script displays the data source management information for different data visualizations of the cacti app. An adversary that is able to configure a malicious Device name can deploy a stored XSS attack against any user of the same or broader privileges. This configuration occurs through "http:///cacti/host.php", while the rendered malicious payload is exhibited at "http:///cacti/data sources.php".Recommendations
For versions prior to 1.2.25, upgrade to version 1.2.25 or later to address the vulnerability.
As a temporary workaround for users unable to update, manually filter HTML output.
Restrict access to the
data sources.php script and http://<HOST>/cacti/host.php endpoint to minimize the risk of exploitation.
Avoid using the Device name parameter in the affected API endpoint until the issue is resolved.Exploit
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Cacti