CVE-2023-49085

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2023-49085
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-49085.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-49085
Aliases
  • GHSA-vr3c-38wh-g855
Downstream
Related
Published
2023-12-22T16:13:13Z
Modified
2025-10-21T19:32:17Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Cacti SQL Injection vulnerability
Details

Cacti provides an operational monitoring and fault management framework. In versions 1.2.25 and prior, it is possible to execute arbitrary SQL code through the pollers.php script. An authorized user may be able to execute arbitrary SQL code. The vulnerable component is the pollers.php. Impact of the vulnerability - arbitrary SQL code execution. As of time of publication, a patch does not appear to exist.

Database specific 
{
    "cwe_ids": [
        "CWE-89"
    ]
}
References

Affected packages

Git /

Affected ranges