CVE-2023-46490

CVSS v3.1 6.5 (Medium)

EPSS 0.06 % (24^th)

Affected Products 1

Advisories 1

SQL Injection vulnerability in Cacti v1.2.25 allows a remote attacker to obtain sensitive information via the form_actions() function in the managers.php function.

Weaknesses

CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE Status: PUBLISHED
CNA: MITRE
Published Date: 2023-10-27 22:15:09
(10 months ago)
Updated Date: 2023-11-13 14:30:41
(10 months ago)

Affected Products

Cacti

Cacti

Configuration #1

		CPE23	From	Up To
	Cacti 1.2.25	cpe:2.3:a:cacti:cacti:1.2.25