CVE-2025-24368
27.01.2025, 18:15
Cacti is an open source performance and fault management framework. Some of the data stored in automation_tree_rules.php is not thoroughly checked and is used to concatenate the SQL statement in build_rule_item_filter() function from lib/api_automation.php, resulting in SQL injection. This vulnerability is fixed in 1.2.29.
| Vendor | Product | Version |
|---|---|---|
| cacti | cacti | 𝑥 < 1.2.29 |
𝑥
= Vulnerable software versions
Debian Releases