PT-2025-1312 · Cacti · Cacti
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Cacti versions prior to 1.2.29
Description
Cacti is an open source performance and fault management framework. An authenticated user can abuse the graph creation and graph template functionality, which is linked to the improper handling of line delimiters, to create arbitrary PHP scripts in the web root of the application. This can lead to remote code execution on the server.
Recommendations
Update to version 1.2.29.
Exploit
Fix
RCE
DoS
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Cacti