PT-2023-5425 · Cacti+1 · Cacti+1

X4Vak · Published 2023-09-05 · Updated 2025-01-24 · CVE-2023-39358

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 1.2.25

Description An authenticated SQL injection issue allows authenticated users to perform privilege escalation and remote code execution. The issue resides in the reports user.php file, specifically in the ajax get branches function where the tree id parameter is passed to the reports get branch select function without validation.

Recommendations For versions prior to 1.2.25, upgrade to version 1.2.25 or later to address the issue. As a temporary workaround, consider restricting access to the reports user.php file and the ajax get branches function until a patch is applied. Avoid using the tree id parameter in the affected function until the issue is resolved.

Exploit

Fix

RCE

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

ALT-PU-2023-7619

ALT-PU-2023-7621

ALT-PU-2024-7120

ALT-PU-2025-1813

BDU:2023-06055

CVE-2023-39358

GHSA-GJ95-7XR8-9P7G

OPENSUSE-SU-2023:0275-1

OPENSUSE-SU-2024:13203-1

Affected Products

Alt Linux

Cacti

References · 54

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/39xxx/CVE-2023-39358.json · Exploit
• 🔥 https://github.com/Cacti/cacti/security/advisories/GHSA-gj95-7xr8-9p7g · Exploit
• https://osv.dev/vulnerability/CVE-2023-39358 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-39358 · Security Note
• https://ubuntu.com/security/CVE-2023-39358 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/CFH3J2WVBKY4ZJNMARVOWJQK6PSLPHFH · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-39358 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-39358 · Security Note
• https://bdu.fstec.ru/vul/2023-06055 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2023:0275-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-39358 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13203-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-39358 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/WZGB2UXJEUYWWA6IWVFQ3ZTP22FIHMGN · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/WOQFYGLZBAWT4AWNMO7DU73QXWPXTCKH · Vendor Advisory