VDB
BDU%3A2024-04180
BDU%3A2024-04180
PUBLISHED
CVSS 9 CRITICAL
Уязвимость функции automation_get_new_graphs_sql программного средства мониторинга сети Cacti, позволяющая нарушителю выполнять произвольные SQL-запросы
Risk Scores
CVSS 2.0
9
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| The Cacti Group Inc. | Cacti |
Timeline
- May 29, 2024 CVE Published
References
- https://github.com/Cacti/cacti/commit/fd93c6e47651958b77c3bbe6a01fff695f81e886 url
- https://github.com/Cacti/cacti/blob/501712998589763d411a68d35e3cda98fd9cfd18/lib/api_automation.php#L717 advisory
- https://github.com/Cacti/cacti/blob/501712998589763d411a68d35e3cda98fd9cfd18/lib/api_automation.php#L856 advisory
- https://github.com/Cacti/cacti/security/advisories/GHSA-vjph-r677-6pcc advisory