CVE-2025-24367

Published Jan 27, 2025

Last updated 7 months ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-24367 is a remote code execution (RCE) vulnerability found in Cacti, an open-source framework used for performance and fault management. This flaw allows an authenticated Cacti user to create arbitrary PHP scripts within the application's web root. The vulnerability arises from improper input validation and neutralization, specifically in how Cacti handles graph creation and graph template functionality. Attackers can exploit this by abusing the graph template system to inject malicious PHP files directly into web-accessible directories, primarily due to the application's failure to adequately restrict file paths and sanitize user-controlled input, particularly newline characters, when interacting with the RRDtool binary. This issue has been addressed in Cacti version 1.2.29.

Description: Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web root of the application, leading to remote code execution on the server. This vulnerability is fixed in 1.2.29.
Source: security-advisories@github.com
NVD status: Modified
Products: cacti

Risk scores

CVSS 4.0

Type: Secondary
Base score: 8.7
Impact score: -
Exploitability score: -
Vector string: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity: HIGH

CVSS 3.1

Type: Primary
Base score: 8.8
Impact score: 5.9
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

security-advisories@github.com: CWE-144
nvd@nist.gov: NVD-CWE-Other

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 1

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:cacti:cacti:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "C0B80A90-97E0-49C0-A780-695E17B0568C",
            "versionEndExcluding": "1.2.29",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.