CVE-2024-31459: Cacti RCE vulnerability by file include in lib/plugin.php
Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, there is a file inclusion issue in the lib/plugin.php file. Combined with SQL injection vulnerabilities, remote code execution can be implemented. There is a file inclusion issue with the apipluginhook() function in the lib/plugin.php file, which reads the pluginhooks and pluginconfig tables in database. The read data is directly used to concatenate the file path which is used for file inclusion. Version 1.2.27 contains a patch for the issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-31459?
CVE-2024-31459 has a critical severity due to the potential for remote code execution through file inclusion and SQL injection vulnerabilities.
How do I fix CVE-2024-31459?
To fix CVE-2024-31459, upgrade to Cacti version 1.2.27 or later, which addresses the file inclusion vulnerability.
What software versions are affected by CVE-2024-31459?
CVE-2024-31459 affects Cacti versions prior to 1.2.27, specifically versions up to and including 1.2.16+ds1-2 and 1.2.24+ds1-1.
Can CVE-2024-31459 lead to unauthorized access?
Yes, CVE-2024-31459 can lead to unauthorized access due to the ability to execute remote code on the server.
Is remote code execution possible with CVE-2024-31459?
Yes, remote code execution is possible with CVE-2024-31459 when combined with SQL injection vulnerabilities.