Debian/cacti: high 8.8
Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web roo
Action: Upgrade cacti to 1.2.28+ds1-4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.28+ds1-4 | - |
Fixed versions
| 1.2.28+ds1-4 |
Sources
- osv: DEBIAN-CVE-2025-24367#Debian:14/cacti
- https://security-tracker.debian.org/tracker/CVE-2025-24367
published · modified · JSON