CVE-2024-54146

Cacti (open source performance/fault management) is affected by a SQL injection in the template function host_templates.php via the graph_template parameter. The issue is tied to CVE-2024-54146 and is noted as due to an incomplete fix, with the vulnerability present up to version 1.2.29. The CVSS...