Skip to content
OpenAdvisories
Critical USN-6720-1 1 CVE

cacti vulnerability

Published Apr 2, 2024 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

Kentaro Kawane discovered that Cacti incorrectly handled user provided
input sent through request parameters to the graph_view.php script.
A remote authenticated attacker could use this issue to perform
SQL injection attacks.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS cacti 1.2.19+ds1-2ubuntu1+esm1

Vulnerabilities 1

  • Critical 9.8
    CVE-2023-39361 Public exploit Scanner template EPSS 89%

    Unauthenticated SQL Injection in graph_view.php in Cacti

    Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a SQL injection discovered in graph_view.php. Since guest users can access graph_view.php without authentication by default, if guest users are bei…

    Cacti cacti cacti cacti Debian Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2023-39361