{"id":"CVE-2023-39361","published":"2023-09-05T20:58:00Z","modified":"2025-02-13T17:02:59Z","title":"Unauthenticated SQL Injection in graph_view.php in Cacti","vendor":"Cacti","product":"cacti","tier":"core","eol":null,"affectedVersions":[{"vendor":"Cacti","product":"cacti","versions":["< 1.2.25"]}],"description":{"text":"Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a SQL injection discovered in graph_view.php. Since guest users can access graph_view.php without authentication by default, if guest users are being utilized in an enabled state, there could be the potential for significant damage. Attackers may exploit this vulnerability, and there may be possibilities for actions such as the usurpation of administrative privileges or remote code execution. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.","provenance":"source","from":"CVE.org"},"summary":{"text":"The flaw is a SQL injection in graph_view.php in Cacti, an open source operational monitoring and fault management framework. An attacker can exploit it over the network without authentication, with no user interaction needed, provided guest user access is enabled, since guest users can reach graph_view.php without logging in by default.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T08:31:58Z"},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.88793,"percentile":0.99775,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2026-07-06","exploitedFirstSeen":"2026-07-06","ransomware":false,"evidence":[{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-07-06&host_type=src&vulnerability=cve-2023-39361","date":"2026-07-06"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-07-08&host_type=src&vulnerability=cve-2023-39361","date":"2026-07-08"},{"url":"https://previdian.com/CVE-2023-39361","date":"2026-07-08"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-07-10&host_type=src&vulnerability=cve-2023-39361","date":"2026-07-10"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-07-11&host_type=src&vulnerability=cve-2023-39361","date":"2026-07-11"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-07-12&host_type=src&vulnerability=cve-2023-39361","date":"2026-07-12"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-07-13&host_type=src&vulnerability=cve-2023-39361","date":"2026-07-13"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-07-16&host_type=src&vulnerability=cve-2023-39361","date":"2026-07-16"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-07-17&host_type=src&vulnerability=cve-2023-39361","date":"2026-07-17"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-07-19&host_type=src&vulnerability=cve-2023-39361","date":"2026-07-19"}],"evidenceTotal":58,"provenance":"source"},"exploited":true,"otx":{"pulseCount":1,"pulses":[{"name":"Vulnerability_Exploitation_Public_Sources_Dec2023","url":"https://otx.alienvault.com/pulse/65926d953adb7c379a0aebc3","created":"2024-01-01"}],"provenance":"machine"},"cwes":[{"id":"CWE-89","name":"Improper Neutralization of Special Elements used in an SQL Command"}],"references":[{"url":"https://github.com/Cacti/cacti/security/advisories/GHSA-6r43-q2fw-5wrg","tags":["x_refsource_CONFIRM"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WZGB2UXJEUYWWA6IWVFQ3ZTP22FIHMGN/","tags":[]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CFH3J2WVBKY4ZJNMARVOWJQK6PSLPHFH/","tags":[]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WOQFYGLZBAWT4AWNMO7DU73QXWPXTCKH/","tags":[]},{"url":"https://www.debian.org/security/2023/dsa-5550","tags":[]},{"url":"https://lists.debian.org/debian-lts-announce/2024/03/msg00018.html","tags":[]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2023-43087","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-43087","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"nuclei":[{"id":"CVE-2023-39361","name":"Cacti 1.2.24 - SQL Injection","severity":"critical","path":"http/cves/2023/CVE-2023-39361.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39361.yaml"}],"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2023-09-05","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2023-39361","provenance":"source"},{"date":"2026-07-06","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-07-06&host_type=src&vulnerability=cve-2023-39361","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":72.5,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":5.0,"detail":"added 115 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.96,"detail":"percentile 0.9978"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.68,"detail":"1 pulse"},{"name":"CVSS severity","points":6.86,"detail":"base score 9.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}