CVE-2025-24367 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to cre…
High CVSS: 8.7

CVE-2025-24367

Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web root of the application, leading to remote code execution on the server. This vulnerability is fixed in 1.2.29.
Vendor
Cacti
Product
Cacti
CWE
CWE-144
Yayın Tarihi
2025-01-27 18:15:42
Güncelleme
2025-11-03 22:18:40
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-144 Cacti HIGH Cacti 2025

Referanslar

https://github.com/Cacti/cacti/commit/c7e4ee798d263a3209ae6e7ba182c7b65284d8f0 https://github.com/Cacti/cacti/security/advisories/GHSA-fxrq-fr7h-9rqq https://lists.debian.org/debian-lts-announce/2025/02/msg00010.html https://github.com/Cacti/cacti/security/advisories/GHSA-fxrq-fr7h-9rqq