Somethingwithproof

**Name of the Vulnerable Software and Affected Versions** Cacti versions prior to 1.2.31 **Description** Locale-dependent decimal formatting in the `rrdtool function update()` function can lead to the corruption of RRDtool metric values. The function validates metric values using `is numeric()` and incorporates them into the RRDtool update command through PHP string interpolation. Because PHP's string cast of floats is sensitive to the `LC NUMERIC` locale setting, environments using a comma as a decimal separator (such as de DE) will convert a value like 1.5 to "1,5". Since RRDtool requires a period as the decimal separator, this discrepancy causes metric data to be silently dropped or shifted into incorrect columns. This data integrity issue occurs when the server locale is misconfigured and is not remotely exploitable. **Recommendations** Update to version 1.2.31.

**Name of the Vulnerable Software and Affected Versions** Cacti versions prior to 1.2.31 **Description** Cacti is an open source performance and fault management framework. The software contains a path traversal flaw in the 'package import.php' endpoint, where the `filename` parameter is not properly validated. Path traversal is a vulnerability that allows an attacker to access files and directories that are stored outside the web root folder. **Recommendations** Update to version 1.2.31. Avoid using the `filename` parameter in the 'package import.php' endpoint until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Cacti versions prior to 1.2.31 **Description** Reflected Cross-Site Scripting (XSS) occurs in the JavaScript context of the 'auth profile.php' endpoint through the `tab` parameter. Reflected XSS is a type of attack where a malicious script is reflected off a web application to the victim's browser. **Recommendations** Update to version 1.2.31. As a temporary workaround, restrict access to the 'auth profile.php' endpoint or avoid using the `tab` parameter until the update is applied.