CVE-2023-39361

🗓️ 05 Sep 2023 20:58:00Reported by GitHub_MType

cve🔗 web.nvd.nist.gov👁 93 Views🌐 WEB

Cacti open source operational monitoring, SQL injection in graph_view.php, upgrade to version 1.2.25 advise

Reporter	Title	Published	Views	Family All 67
AlpineLinux	CVE-2023-39361	5 Sep 202320:58	–	alpinelinux
GithubExploit	Exploit for SQL Injection in Cacti	26 Apr 202509:18	–	githubexploit
BDU FSTEC	The vulnerability of the `grow_right_pane_tree()` function in the Cacti network monitoring software, which allows a hacker to execute arbitrary SQL queries.	13 Sep 202300:00	–	bdu_fstec
Circl	CVE-2023-39361	6 Sep 202300:17	–	circl
CNNVD	Cacti SQL Injection Vulnerability	5 Sep 202300:00	–	cnnvd
Cvelist	CVE-2023-39361 Unauthenticated SQL Injection in graph_view.php in Cacti	5 Sep 202320:58	–	cvelist
Debian	[SECURITY] [DLA 3765-1] cacti security update	18 Mar 202418:26	–	debian
Debian	[SECURITY] [DSA 5550-1] cacti security update	8 Nov 202322:40	–	debian
Debian CVE	CVE-2023-39361	5 Sep 202320:58	–	debiancve
Tenable Nessus	Debian dla-3765 : cacti - security update	18 Mar 202400:00	–	nessus

NVD

Vulners

Node

cacti cactiMatch1.2.24

Node

fedoraproject fedoraMatch37

fedoraproject fedoraMatch38

[
  {
    "vendor": "Cacti",
    "product": "cacti",
    "versions": [
      {
        "version": "< 1.2.25",
        "status": "affected"
      }
    ]
  }
]

Source	Link
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/WZGB2UXJEUYWWA6IWVFQ3ZTP22FIHMGN/
debian	www.debian.org/security/2023/dsa-5550
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/WOQFYGLZBAWT4AWNMO7DU73QXWPXTCKH/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/CFH3J2WVBKY4ZJNMARVOWJQK6PSLPHFH/
lists	www.lists.debian.org/debian-lts-announce/2024/03/msg00018.html
github	www.github.com/Cacti/cacti/security/advisories/GHSA-6r43-q2fw-5wrg

Parameter	Position	Path	Description	CWE
rfilter	query param	graph_view.php?action=tree_content&node=1-1-tree_anchor&rfilter=aaaaaaa%22%20OR%20%22%22=%22(%28%22%29%20UNION%20SELECT%201,2,(select%20concat(id,0x23,username,0x23,password)%20from%20user_auth%20limit%201),4,5,6,(select%20user()),(select%20version()),9,10%23	SQL injection via rfilter param in graph_view.php triggering code execution/data extraction	CWE-89

21 Nov 2024 08:15Current

10High risk

Vulners AI Score10

CVSS 3.19.8

EPSS0.92278

CWE-89