CVE-2023-39365: Cacti link Local File Inclusion Remote Code Execution Vulnerability
Cacti is an open source operational monitoring and fault management framework. Issues with Cacti Regular Expression validation combined with the external links feature can lead to limited SQL Injections and subsequent data leakage. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Other sources
This vulnerability allows remote attackers to bypass authentication or escalate privileges on affected installations of Cacti. Authentication is required to exploit this vulnerability when the product is in its default configuration. The specific flaw exists within the graphview endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the service account.
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cacti. Authentication is required to exploit this vulnerability. The specific flaw exists within the link endpoint. The issue results from the lack of proper validation of data retrieved from the database prior to passing it to a PHP include function. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the service account.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-39365?
CVE-2023-39365 is a vulnerability in the Cacti open source operational monitoring and fault management framework that can lead to limited SQL Injections and subsequent data leakage.
What is the severity of CVE-2023-39365?
The severity of CVE-2023-39365 is rated as medium with a CVSS score of 6.3.
How does CVE-2023-39365 affect Cacti?
CVE-2023-39365 affects Cacti versions up to and excluding 1.2.25, allowing for limited SQL Injections and potential data leakage.
How do I fix CVE-2023-39365?
To fix CVE-2023-39365, users are advised to upgrade to Cacti version 1.2.25.
Where can I find more information about CVE-2023-39365?
For more information about CVE-2023-39365, you can visit the Cacti Security Advisories page on GitHub (link provided in the references).