Log in Start free

Vulnerability · Published May 13, 2024 · Assigned by GitHub_M

CVE-2024-29894Cacti Cross-site Scripting vulnerability when using JavaScript based messaging API

Medium 5.4

In plain English

A medium-severity cross-site scripting in cacti from Cacti. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 60% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.4Medium
Exploit odds (30 days)0.9%top 40.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Cacti provides an operational monitoring and fault management framework. Versions of Cacti prior to 1.2.27 contain a residual cross-site scripting vulnerability caused by an incomplete fix for CVE-2023-50250. `raise_message_javascript` from `lib/functions.php` now uses purify.js to fix CVE-2023-50250 (among others). However, it still generates the code out of unescaped PHP variables `$title` and `$header`. If those variables contain single quotes, they can be used to inject JavaScript code. An attacker exploiting this vulnerability could execute actions on behalf of other users. This ability to impersonate users could lead to unauthorized changes to settings. Version 1.2.27 fixes this issue.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20cacti1.2.27-r0ALPINE-CVE-2024-29894
Alpine:v3.21cacti1.2.27-r0ALPINE-CVE-2024-29894
Alpine:v3.22cacti1.2.27-r0ALPINE-CVE-2024-29894
Alpine:v3.23cacti1.2.27-r0ALPINE-CVE-2024-29894
Alpine:v3.24cacti1.2.27-r0ALPINE-CVE-2024-29894
Debian:12cacti1.2.24+ds1-1+deb12u3DEBIAN-CVE-2024-29894
Debian:13cacti1.2.27+ds1-1DEBIAN-CVE-2024-29894
Debian:14cacti1.2.27+ds1-1DEBIAN-CVE-2024-29894
Ubuntu:22.04:LTScacti1.2.19+ds1-2ubuntu1.1USN-6969-1
Ubuntu:24.04:LTScacti1.2.26+ds1-1ubuntu0.1USN-6969-1
Ubuntu:24.04:LTScacti1.2.26+ds1-1ubuntu0.1UBUNTU-CVE-2024-29894

Affected products (as reported)

VendorProductVersions
Cacti cacti < 1.2.27

Weakness: CWE-116, CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

References