UBUNTU-CVE-2023-49085
- Source
- https://ubuntu.com/security/CVE-2023-49085
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-49085.json
- JSON Data
- https://api.osv.dev/v1/vulns/UBUNTU-CVE-2023-49085
- Upstream
- Published
- 2023-12-22T17:15:00Z
- Modified
- 2025-07-18T16:54:42Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Ubuntu - medium
- Summary
- [none]
- Details
-
Cacti provides an operational monitoring and fault management framework. In versions 1.2.25 and prior, it is possible to execute arbitrary SQL code through the
pollers.phpscript. An authorized user may be able to execute arbitrary SQL code. The vulnerable component is thepollers.php. Impact of the vulnerability - arbitrary SQL code execution. As of time of publication, a patch does not appear to exist. - References
Affected packages
Ubuntu:Pro:14.04:LTS / cacti
Package
- Name
- cacti
- Purl
- pkg:deb/ubuntu/cacti@0.8.8b+dfsg-5ubuntu0.2+esm2?arch=source&distro=esm-infra-legacy/trusty
Ubuntu:Pro:16.04:LTS / cacti
Package
- Name
- cacti
- Purl
- pkg:deb/ubuntu/cacti@0.8.8f+ds1-4ubuntu4.16.04.2+esm2?arch=source&distro=esm-apps/xenial
Ubuntu:Pro:18.04:LTS / cacti
Package
- Name
- cacti
- Purl
- pkg:deb/ubuntu/cacti@1.1.38+ds1-1ubuntu0.1~esm4?arch=source&distro=esm-apps/bionic
Ubuntu:Pro:20.04:LTS / cacti
Package
- Name
- cacti
- Purl
- pkg:deb/ubuntu/cacti@1.2.10+ds1-1ubuntu1.1+esm2?arch=source&distro=esm-apps/focal