PT-2024-7759 · Cacti+1 · Cacti+1

Tayfunyelim · Published 2023-07-13 · Updated 2025-02-11 · CVE-2024-43365

Positive Technologies (AI Summary)

CVSS v2.0

8.0

High

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:C

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 1.2.28

Description The issue arises from the improper sanitization of the consolenewsection parameter when saving external links in links.php, which is then stored in the database and reflected back to the user in index.php, leading to stored XSS. Users with the privilege to create external links can manipulate the consolenewsection parameter in the HTTP post request to perform stored XSS attacks. This occurs when an application allows untrusted user input to be displayed on a web page without proper validation or escaping.

Recommendations For versions prior to 1.2.28, upgrade to release version 1.2.28 to address the issue. As a temporary workaround, consider restricting access to the consolenewsection parameter in links.php to minimize the risk of exploitation. Additionally, restrict the ability for users to create external links until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

ALT-PU-2023-4394

ALT-PU-2023-4396

ALT-PU-2023-5196

ALT-PU-2024-14329

ALT-PU-2025-1813

BDU:2024-09250

CVE-2024-43365

DLA-4048-1

DSA-5862-1

GHSA-49F2-HWX9-QFFR

Affected Products

Alt Linux

Cacti

References · 39

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cacti_pollers_sqli_rce.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cacti_package_import_rce.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/cacti_filter_sqli_rce.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/cacti_unauthenticated_cmd_injection.rb · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/43xxx/CVE-2024-43365.json · Exploit
• 🔥 https://github.com/Cacti/cacti/security/advisories/GHSA-49f2-hwx9-qffr · Exploit
• 🔥 https://github.com/mhaskar/CVE-2020-8813 · Exploit
• 🔥 https://github.com/0xf4n9x/CVE-2022-46169 · Exploit
• 🔥 https://github.com/FredBrave/CVE-2022-46169-CACTI-1.2.22 · Exploit
• 🔥 https://github.com/sAsPeCt488/CVE-2022-46169 · Exploit
• 🔥 https://github.com/ariyaadinatha/cacti-cve-2022-46169-exploit · Exploit
• 🔥 https://github.com/Anthonyc3rb3ru5/CVE-2022-46169 · Exploit
• 🔥 https://github.com/deadyP00l/CVE-2022-46169 · Exploit
• 🔥 https://github.com/c3rrberu5/CVE-2022-46169 · Exploit
• 🔥 https://github.com/botfather0x0/CVE-2022-46169 · Exploit