VDB
BDU%3A2024-05742
BDU%3A2024-05742
PUBLISHED
CVSS 9.100000381469727 CRITICAL
Уязвимость функции import_package() (lib/import.php) программного средства мониторинга сети Cacti, позволяющая нарушителю выполнить произвольный PHP-код
Risk Scores
CVSS 3.1
9.100000381469727
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cacti | cacti | < 1.2.27 |
| Fedora Project, The Cacti Group Inc. | Fedora, Cacti | |
| the_cacti_group | cacti | 0 |
Timeline
- May 13, 2024 CVE Published
- May 13, 2024 PoC Published
- May 14, 2024 PoC Published
- May 14, 2024 PoC Published
- May 14, 2024 PoC Published
- May 14, 2024 PoC Published
- May 14, 2024 PoC Published
- May 14, 2024 PoC Published
- May 19, 2024 PoC Published
- Jun 12, 2024 PoC Published
- Jul 25, 2024 CVE Updated
- Aug 27, 2024 PoC Published
References
- https://ru.0day.today/exploit/39613 url
- https://seclists.org/fulldisclosure/2024/May/6 url
- https://vuldb.com/ru/?id.263978 url
- https://github.com/Cacti/cacti/commit/eff35b0ff26cc27c82d7880469ed6d5e3bef6210 url
- https://github.com/Cacti/cacti/security/advisories/GHSA-7cmj-g5qc-pj88 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RBEOAFKRARQHTDIYSL723XAFJ2Q6624X/ advisory
- http://seclists.org/fulldisclosure/2024/May/6 url
- https://lists.debian.org/debian-lts-announce/2024/09/msg00027.html url