PT-2023-5429 · Cacti · Cacti

Enferas · Published 2023-08-22 · Updated 2024-09-09 · CVE-2022-41444

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cacti version 1.2.21

Description The issue is related to a Cross Site Scripting (XSS) vulnerability. It can be exploited via a crafted POST request to the "graphs new.php" endpoint. This vulnerability may allow a remote attacker to perform inter-site script attacks.

Recommendations For Cacti version 1.2.21, consider disabling access to the "graphs new.php" endpoint until a patch is available. Restricting the use of this endpoint can help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2023-06059

CVE-2022-41444

DLA-3884-1

Affected Products

Cacti

References · 46

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cacti_package_import_rce.rb · Exploit
• 🔥 https://github.com/thisisveryfunny/CVE-2024-25641-RCE-Automated-Exploit-Cacti-1.2.26 · Exploit
• 🔥 https://github.com/5ma1l/CVE-2024-25641 · Exploit
• 🔥 https://github.com/StopThatTalace/CVE-2024-25641-CACTI-RCE-1.2.26 · Exploit
• 🔥 https://github.com/XiaomingX/cve-2024-25641-poc · Exploit
• 🔥 https://gist.github.com/enferas/9079535112e4f4ff2c1d2ce1c099d4c2 · Exploit
• https://bdu.fstec.ru/vul/2024-04180 · Security Note
• https://security-tracker.debian.org/tracker/source-package/cacti · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31444 · Security Note
• https://ubuntu.com/security/CVE-2022-41444 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-41444 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34340 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31459 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31443 · Security Note
• https://osv.dev/vulnerability/DLA-3884-1 · Vendor Advisory