PT-2023-5428 · Cacti+1 · Cacti+1
Netniv
·
Publicado
2023-09-05
·
Atualizado
2025-01-24
·
CVE-2023-39365
CVSS v2.0
6.5
Média
| Vetor | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Cacti versions prior to 1.2.25
Description
The issue is related to Cacti, an open source operational monitoring and fault management framework. It involves problems with Regular Expression validation combined with the external links feature, which can lead to limited SQL Injections and subsequent data leakage. This can allow a remote attacker to execute arbitrary SQL queries.
Recommendations
For versions prior to 1.2.25, users are advised to upgrade to version 1.2.25 or later to address the issue. As a temporary workaround, consider restricting access to the external links feature until the upgrade is applied. There are no known workarounds for this issue other than upgrading.
Exploit
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Cacti