CVE-2023-51448CWE-89

SQL Injection vulnerability when managing SNMP Notification Receivers

High · published December 22, 2023

Patch now

High probability of exploitation

CVSS calls it high at 8.8. It sits in the 99.3th percentile for exploit probability.

CVSS v3.1

8.8

EPSS

67%

Percentile

99.3

In the wild

Unconfirmed

What it is

Cacti provides an operational monitoring and fault management framework. Version 1.2.25 has a Blind SQL Injection (SQLi) vulnerability within the SNMP Notification Receivers feature in the file `‘managers.php’`. An authenticated attacker with the “Settings/Utilities” permission can send a crafted HTTP GET request to the endpoint `‘/cacti/managers.php’` with an SQLi payload in the `‘selected_graphs_array’` HTTP GET parameter. As of time of publication, no patched versions exist.

The record

Technical detail

CVSS v3.1: 8.8 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.67338 · 99.3th percentile
Weakness: CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published: 2023-12-22T16:44Z

EPSS history

Timeline

22 DEC 16:44Z
SQL Injection vulnerability when managing SNMP Notification Receivers
cvelistv5