1. Home
  2. CVE Database
  3. CVE-2023-39365
MEDIUM · 4.6

CVE-2023-39365

Cacti is an open source operational monitoring and fault management framework. Issues with Cacti Regular Expression validation combined with the external links feature can lead to limited SQL Injectio...

Vulnerability Description

Cacti is an open source operational monitoring and fault management framework. Issues with Cacti Regular Expression validation combined with the external links feature can lead to limited SQL Injections and subsequent data leakage. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS Score

4.6

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
LOW

Affected Products

VendorProductVersions
CactiCacti< 1.2.25
FedoraprojectFedora37

Related Weaknesses (CWE)

CWE-89

References

FAQ

What is CVE-2023-39365?

CVE-2023-39365 is a vulnerability with a CVSS score of 4.6 (MEDIUM). Cacti is an open source operational monitoring and fault management framework. Issues with Cacti Regular Expression validation combined with the external links feature can lead to limited SQL Injectio...

How severe is CVE-2023-39365?

CVE-2023-39365 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-39365?

Check the references section above for vendor advisories and patch information. Affected products include: Cacti Cacti, Fedoraproject Fedora.