CVE-2025-24367

🗓️ 27 Jan 2025 17:12:40Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 1035 Views🌐 WEB

Cacti vulnerability allows authenticated users to create scripts, leading to remote code execution.

Reporter	Title	Published	Views	Family All 49
GithubExploit	MonitorsFour-Write-UP	26 May 202611:00	–	githubexploit
GithubExploit	Exploit for Improper Neutralization of Line Delimiters in Cacti	14 Dec 202523:08	–	githubexploit
GithubExploit	Exploit for Improper Neutralization of Line Delimiters in Cacti	14 Dec 202520:29	–	githubexploit
GithubExploit	Exploit for Improper Neutralization of Line Delimiters in Cacti	2 May 202623:30	–	githubexploit
GithubExploit	Exploit for Improper Neutralization of Line Delimiters in Cacti	12 Dec 202509:36	–	githubexploit
GithubExploit	Exploit for Improper Neutralization of Line Delimiters in Cacti	2 May 202606:39	–	githubexploit
ATTACKERKB	CVE-2025-24367	27 Jan 202518:15	–	attackerkb
AlpineLinux	CVE-2025-24367	27 Jan 202517:12	–	alpinelinux
Information Security Automation	February Linux Patch Wednesday	25 Feb 202510:19	–	avleonov
Circl	CVE-2025-24367	27 Jan 202517:20	–	circl

NVD

Vulners

Node

cacti cactiRange<1.2.29

[
  {
    "vendor": "Cacti",
    "product": "cacti",
    "versions": [
      {
        "version": "<= 1.2.28",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/Cacti/cacti/commit/c7e4ee798d263a3209ae6e7ba182c7b65284d8f0
github	www.github.com/Cacti/cacti/security/advisories/GHSA-fxrq-fr7h-9rqq
lists	www.lists.debian.org/debian-lts-announce/2025/02/msg00010.html

Parameter	Position	Path	Description	CWE
right_axis_label	request body	/graph_templates.php	Authenticated RCE via graph template update using right_axis_label injection	CWE-144

03 Nov 2025 22:18Current

7.9High risk

Vulners AI Score7.9

CVSS 3.18.8

CVSS 48.7

EPSS0.87934

SSVC

CWE-144