ZDI-23-1499: Cacti link Local File Inclusion Remote Code Execution Vulnerability

Published Oct 4, 2023

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cacti. Authentication is required to exploit this vulnerability. The specific flaw exists within the link endpoint. The issue results from the lack of proper validation of data retrieved from the database prior to passing it to a PHP include function. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the service account.

Other sources

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cacti. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.6. The following CVEs are assigned: CVE-2023-39365.

Affected Software

1 affected component

Cacti Cacti

Event History

Oct 4, 2023

Advisory Published

05:00 AM

Data Sourced

05:00 AM

Description

Jan 29, 2025

Advisory Published

06:51 AM

Frequently Asked Questions

What is the vulnerability ID for this Cacti vulnerability?

The vulnerability ID for this Cacti vulnerability is ZDI-23-1499.

What is the severity of vulnerability ZDI-23-1499?

The severity of vulnerability ZDI-23-1499 is medium.

How does this vulnerability affect Cacti?

This vulnerability affects Cacti installations.

Is authentication required to exploit this vulnerability?

Yes, authentication is required to exploit this vulnerability.

Where can I find more information about vulnerability ZDI-23-1499?

You can find more information about vulnerability ZDI-23-1499 on the Zero Day Initiative website and the Cacti GitHub repository.