cacti -- Multiple vulnerabilities
| Affected packages |
|
|
cacti |
< |
1.2.29 |
|
Details
| VuXML ID |
e7974ca5-e4c8-11ef-aab3-40b034429ecf |
| Discovery |
2025-02-02 |
| Entry |
2025-02-05 |
Cacti repo reports:
- security #GHSA-c5j8-jxj3-hh36: Authenticated RCE via multi-line SNMP responses
- security #GHSA-f9c7-7rc3-574c: SQL Injection vulnerability when using tree rules through Automation API
- security #GHSA-fh3x-69rr-qqpp: SQL Injection vulnerability when request automation devices
- security #GHSA-fxrq-fr7h-9rqq: Arbitrary File Creation leading to RCE
- security #GHSA-pv2c-97pp-vxwg: Local File Inclusion (LFI) Vulnerability via Poller Standard Error Log Path
- security #GHSA-vj9g-p7f2-4wqj: SQL Injection vulnerability when view host template
References
| CVE Name |
CVE-2024-45598 |
| CVE Name |
CVE-2024-54145 |
| CVE Name |
CVE-2024-54146 |
| CVE Name |
CVE-2025-22604 |
| CVE Name |
CVE-2025-24367 |
| CVE Name |
CVE-2025-24368 |
Copyright © 2003-2005 Jacques Vidrine and contributors.
Please see the source of this document for full copyright
information.