Skip to content
OpenAdvisories
Medium WID-SEC-2024-3088 4 CVEs

Cacti: Mehrere Schwachstellen

Published Oct 6, 2024 · Updated Apr 23, 2026 · Revision 5 · de-DE

Vendor: Debian Vendor: SUSE Product: Linux Product: openSUSE Platform: Linux Platform: Windows

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in Cacti ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen oder beliebigen Code auszuführen.

Product

Cacti ist ein grafisches Frontend zur Visualisierung von statistischen Daten, erfasst durch die Round Robin Database rrdtool.

Vulnerabilities 4

  • High 7.3
    CVE-2024-43362 EPSS 39%

    Stored Cross-site Scripting (XSS) when creating external links in Cacti

    Cacti is an open source performance and fault management framework. The `fileurl` parameter is not properly sanitized when saving external links in `links.php` . Morever, the said fileurl is placed in some html code which is passed to the `print` function in …

    Cacti cacti cacti cacti Debian Ubuntu Alpine
  • High 7.2
    CVE-2024-43363 Public exploit EPSS 36%

    Remote code execution via Log Poisoning in Cacti

    Cacti is an open source performance and fault management framework. An admin user can create a device with a malicious hostname containing php code and repeat the installation process (completing only step 5 of the installation process is enough, no need to c…

    Cacti cacti cacti cacti Debian Ubuntu Alpine
  • Medium 5.7
    CVE-2024-43364 EPSS 38%

    Stored Cross-site Scripting (XSS) when creating external links in Cacti

    Cacti is an open source performance and fault management framework. The `title` parameter is not properly sanitized when saving external links in links.php . Morever, the said title parameter is stored in the database and reflected back to user in index.php, …

    Cacti cacti cacti cacti Debian Ubuntu Alpine
  • Medium 5.7
    CVE-2024-43365 EPSS 25%

    Stored Cross-site Scripting (XSS) when creating external links in Cacti

    Cacti is an open source performance and fault management framework. The`consolenewsection` parameter is not properly sanitized when saving external links in links.php . Morever, the said consolenewsection parameter is stored in the database and reflected back…

    Cacti cacti cacti cacti Debian Ubuntu Alpine

Revision history

  1. #5

    Neue Updates von openSUSE aufgenommen

  2. #4

    Neue Updates von openSUSE aufgenommen

  3. #3

    Neue Updates von Debian aufgenommen

  4. #2

    Neue Updates von Debian aufgenommen

  5. #1

    Initiale Fassung

References