CVE-2020-8813
graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph…
published February 22, 2020
Patch now
High probability of exploitation
NVD has not assigned a CVSS score to this record. It sits in the 99.5th percentile for exploit probability.
What it is
graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph real-time privilege.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.73957 · 99.5th percentile
- Published
- 2020-02-22T00:00Z
EPSS history
Timeline