CVE-2023-39358: Authenticated SQL injection vulnerability in reports_user.php in Cacti
Cacti is an open source operational monitoring and fault management framework. An authenticated SQL injection vulnerability was discovered which allows authenticated users to perform privilege escalation and remote code execution. The vulnerability resides in the reportsuser.php file. In ajaxgetbranches, the treeid parameter is passed to the reportsgetbranchselect function without any validation. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/cactito a version that resolves this vulnerability.Fixed in 1.2.26-r0 - Upgrade
Upgrade
alpine/cactito a version that resolves this vulnerability.Fixed in 1.2.25-r0 - Upgrade
Upgrade
Cactito a version that resolves this vulnerability.Fixed in 1.2.25
Event History
Frequently Asked Questions
What is CVE-2023-39358 vulnerability?
CVE-2023-39358 is an authenticated SQL injection vulnerability in Cacti, allowing authenticated users to perform privilege escalation and remote code execution.
How does CVE-2023-39358 affect Cacti?
CVE-2023-39358 affects Cacti version 1.2.25. It allows authenticated users to perform privilege escalation and remote code execution.
What is the severity of CVE-2023-39358?
CVE-2023-39358 has a severity rating of 8.8 (high).
How can I fix CVE-2023-39358 vulnerability in Cacti?
To fix CVE-2023-39358 in Cacti, you should update to a version beyond 1.2.25, which is the affected version.
Where can I find more information about CVE-2023-39358?
You can find more information about CVE-2023-39358 on the official GitHub page of Cacti: [link](https://github.com/Cacti/cacti/security/advisories/GHSA-gj95-7xr8-9p7g)