PT-2024-3608 · Cacti · Cacti

Liotree · Published 2024-05-13 · Updated 2024-05-14 · CVE-2024-30268

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Cacti versions 1.3.x

Description: A reflected cross-site scripting issue in Cacti allows attackers to obtain cookies of administrator and other users and fake their login using obtained cookies. This is related to the lack of measures to neutralize special elements in the display settings function, which can be exploited by a remote attacker to perform cross-site scripting using cookie forgery.

Recommendations: For versions 1.3.x, update to a version that includes the fix for this issue, specifically the commit a38b9046e9772612fda847b46308f9391a49891e. As a temporary workaround, consider restricting access to the display settings function to minimize the risk of exploitation.

Exploit

Fix

Improper Neutralization

Special Elements Injection

XSS

Weakness Enumeration

CWE-707

CWE-74

CWE-79

Related Identifiers

BDU:2024-03924

CVE-2024-30268

GHSA-9M3V-WHMR-PC2Q

Affected Products

Cacti

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/30xxx/CVE-2024-30268.json · Exploit
• https://bdu.fstec.ru/vul/2024-03924 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-30268 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-30268 · Security Note
• https://osv.dev/vulnerability/CVE-2024-30268 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-30268 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-30268 · Security Note
• https://github.com/Cacti/cacti/blob/08497b8bcc6a6037f7b1aae303ad8f7dfaf7364e/settings.php#L66 · Note
• https://github.com/Cacti/cacti/commit/a38b9046e9772612fda847b46308f9391a49891e · Note
• https://github.com/Cacti/cacti/security/advisories/GHSA-9m3v-whmr-pc2q · Note
• https://releasealert.dev/cve/CVE-2024-30268 · Note
• https://twitter.com/CVEnew/status/1790038006826483964 · Twitter Post
• https://vuldb.com/?id.263990 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-30268 · Note
• https://securityonline.info/critical-security-flaws-in-cacti-command-injection-cve-2024-29895-cvss-10-and-xss-vulnerabilities · Note