CVE-2023-49085
Cacti SQL Injection vulnerability
概要
Cacti SQL Injection vulnerability
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Cacti provides an operational monitoring and fault management framework. In versions 1.2.25 and prior, it is possible to execute arbitrary SQL code through the pollers.php script. An authorized user may be able to execute arbitrary SQL code. The vulnerable component is the pollers.php. Impact of the vulnerability - arbitrary SQL code execution. As of time of publication, a patch does not appear to exist.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2023-49085 cacti 修正版: 1.2.16+ds1-2+deb11u3
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web packetstormsecurity.com
- web github.com
- web lists.debian.org
- web lists.fedoraproject.org