PT-2023-4934 · Cacti+1 · Cacti+1
Vissamoutafis
·
Published
2023-09-05
·
Updated
2025-01-24
·
CVE-2023-39512
CVSS v2.0
8.5
High
| Vector | AV:N/AC:L/Au:S/C:C/I:C/A:N |
Name of the Vulnerable Software and Affected Versions
Cacti versions prior to 1.2.25
Description
The issue exists due to inadequate protection of the web page structure in the Cacti network monitoring tool. This allows a remote attacker to conduct cross-site scripting attacks. An authenticated user can poison data stored in the Cacti database, which will be viewed by administrative accounts and execute JavaScript code in the victim's browser. The vulnerability can be exploited by configuring a malicious device name, which can be done by a user with General Administration>Sites/Devices/Data permissions through the
http://<HOST>/cacti/host.php endpoint. The malicious payload is rendered at the http://<HOST>/cacti/data sources.php endpoint.Recommendations
For versions prior to 1.2.25, upgrade to version 1.2.25 or later to resolve the issue.
As a temporary workaround for users unable to update, manually filter HTML output to minimize the risk of exploitation.
Restrict access to the
data sources.php script and the host.php endpoint to minimize the risk of exploitation.
Avoid using the device name configuration feature in Cacti until the issue is resolved.Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Cacti