{"id":"CVE-2019-17357","aliases":["DEBIAN-CVE-2019-17357","EUVD-2019-7767","GHSA-mxrx-hwh2-j2jm","UBUNTU-CVE-2019-17357","openSUSE-SU-2020:0272-1","openSUSE-SU-2020:0284-1","openSUSE-SU-2020:0558-1","openSUSE-SU-2020:0565-1","openSUSE-SU-2024:10670-1"],"status":"published","title":"Cacti through 1.2.7 is affected by a graphs.php?template_id= SQL injection vulnerability...","description":"Cacti through 1.2.7 is affected by a graphs.php?template_id= SQL injection vulnerability affecting how template identifiers are handled when a string and id composite value are used to identify the template type and id. An authenticated attacker can exploit this to extract data from the database, or an unauthenticated remote attacker could exploit this via Cross-Site Request Forgery.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.3424,"percentile":0.98417,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-89"],"published":"2020-01-21T18:35:44Z","modified":"2026-10-20T10:50:48Z","fixes":[{"ecosystem":"Debian:12","package":"cacti","fixed_in":["1.2.8+ds1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"cacti","fixed_in":["1.2.8+ds1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cacti","fixed_in":["1.2.8+ds1-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8+ds1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8+ds1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8+ds1-1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8.8b+dfsg-3","0.8.8b+dfsg-5","0.8.8b+dfsg-5ubuntu0.1","0.8.8b+dfsg-5ubuntu0.2","0.8.8b+dfsg-5ubuntu0.2+esm1","0.8.8b+dfsg-5ubuntu0.2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8.8f+ds1-2","0.8.8f+ds1-3","0.8.8f+ds1-4","0.8.8f+ds1-4ubuntu1","0.8.8f+ds1-4ubuntu2","0.8.8f+ds1-4ubuntu3","0.8.8f+ds1-4ubuntu4","0.8.8f+ds1-4ubuntu4.16.04","0.8.8f+ds1-4ubuntu4.16.04.1","0.8.8f+ds1-4ubuntu4.16.04.2","0.8.8f+ds1-4ubuntu4.16.04.2+esm1","0.8.8f+ds1-4ubuntu4.16.04.2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.18+ds1-1","1.1.27+ds1-2","1.1.27+ds1-3","1.1.28+ds1-2","1.1.35+ds1-1","1.1.36+ds1-1","1.1.38+ds1-1","1.1.38+ds1-1ubuntu0.1~esm1","1.1.38+ds1-1ubuntu0.1~esm3","1.1.38+ds1-1ubuntu0.1~esm4"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.9-lp151.3.3.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"cacti-spine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.9-lp151.3.3.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP1","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.9-bp151.4.3.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP1","package":"cacti-spine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.9-bp151.4.3.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-5.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"cacti-spine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-5.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"cacti-spine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP1","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-bp151.4.6.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP1","package":"cacti-spine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-bp151.4.6.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.18-1.2"}]}],"bundled":31}],"products":[{"vendor":"cacti","product":"cacti"}],"references":[{"url":"https://www.darkmatter.ae/xen1thlabs/","tags":["x_refsource_MISC","x_transferred","Broken Link","web"]},{"url":"https://github.com/Cacti/cacti/issues/3025","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=947374","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00001.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00005.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/202003-40","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00042.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00048.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-17357"},{"url":"https://github.com/advisories/GHSA-mxrx-hwh2-j2jm"},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-17357","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-17357","tags":["report"]},{"url":"https://github.com/Cacti/cacti/commit/d6dc48503bbcde0717e7a93df7638fd4796200f4","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-17357","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QJH5OTPHSPMFV4CORKBXMWKMQWVD3CC5/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1082318","tags":["report"]},{"url":"https://bugzilla.suse.com/1101024","tags":["report"]},{"url":"https://bugzilla.suse.com/1101139","tags":["report"]},{"url":"https://bugzilla.suse.com/1122242","tags":["report"]},{"url":"https://bugzilla.suse.com/1122243","tags":["report"]},{"url":"https://bugzilla.suse.com/1122244","tags":["report"]},{"url":"https://bugzilla.suse.com/1122245","tags":["report"]},{"url":"https://bugzilla.suse.com/1122535","tags":["report"]},{"url":"https://bugzilla.suse.com/1158990","tags":["report"]},{"url":"https://bugzilla.suse.com/1158992","tags":["report"]},{"url":"https://bugzilla.suse.com/1161297","tags":["report"]},{"url":"https://bugzilla.suse.com/1163749","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7237","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/E42YKBXB3DG7EDJCOOGLDZ757NRYDL6I/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/I7VM65WPOCAD6HUODTOBDF4DOY2KSANI/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1164675","tags":["report"]},{"url":"https://bugzilla.suse.com/1169215","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8813","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZCYZNXPQBT3RNEEVMDXCIG76SLTOPTF5/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-6799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16660","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16661","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35701","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-17357","description":"Cacti through 1.2.7 is affected by a graphs.php?template_id= SQL injection vulnerability affecting how template identifiers are handled when a string and id composite value are used to identify the template type and id. An authenticated attacker can exploit this to extract data from the database, or an unauthenticated remote attacker could exploit this via Cross-Site Request Forgery.","status":"published","published":"2020-01-21T18:35:44Z","modified":"2024-08-05T01:40:15.202Z","updated_at":"2026-11-02T14:20:24.678649Z"}],"euvd":[{"id":"EUVD-2019-7767","description":"Cacti through 1.2.7 is affected by a graphs.php?template_id= SQL injection vulnerability affecting how template identifiers are handled when a string and id composite value are used to identify the template type and id. An authenticated attacker can exploit this to extract data from the database, or an unauthenticated remote attacker could exploit this via Cross-Site Request Forgery.","status":"published","published":"2020-01-21T18:35:44Z","modified":"2024-08-05T01:40:15Z","updated_at":"2026-11-03T02:40:30.328063Z"}],"ghsa":[{"id":"GHSA-mxrx-hwh2-j2jm","title":"Cacti through 1.2.7 is affected by a graphs.php?template_id= SQL injection vulnerability...","description":"Cacti through 1.2.7 is affected by a graphs.php?template_id= SQL injection vulnerability affecting how template identifiers are handled when a string and id composite value are used to identify the template type and id. An authenticated attacker can exploit this to extract data from the database, or an unauthenticated remote attacker could exploit this via Cross-Site Request Forgery.","status":"published","published":"2022-05-24T17:07:00Z","modified":"2023-01-29T05:01:20Z","updated_at":"2026-11-02T14:44:47.423333Z"}],"nvd":[{"id":"CVE-2019-17357","description":"Cacti through 1.2.7 is affected by a graphs.php?template_id= SQL injection vulnerability affecting how template identifiers are handled when a string and id composite value are used to identify the template type and id. An authenticated attacker can exploit this to extract data from the database, or an unauthenticated remote attacker could exploit this via Cross-Site Request Forgery.","status":"published","published":"2020-01-21T19:15:13.067Z","modified":"2026-06-17T02:23:47.86Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:05:42.416368Z"}],"osv":[{"id":"CVE-2019-17357","description":"Cacti through 1.2.7 is affected by a graphs.php?template_id= SQL injection vulnerability affecting how template identifiers are handled when a string and id composite value are used to identify the template type and id. An authenticated attacker can exploit this to extract data from the database, or an unauthenticated remote attacker could exploit this via Cross-Site Request Forgery.","status":"published","published":"2020-01-21T19:15:13.067Z","modified":"2026-10-20T10:50:48.598935075Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:11.673963Z"},{"id":"DEBIAN-CVE-2019-17357","description":"Cacti through 1.2.7 is affected by a graphs.php?template_id= SQL injection vulnerability affecting how template identifiers are handled when a string and id composite value are used to identify the template type and id. An authenticated attacker can exploit this to extract data from the database, or an unauthenticated remote attacker could exploit this via Cross-Site Request Forgery.","status":"published","published":"2020-01-21T19:15:13.067Z","modified":"2026-09-21T07:02:28.158092744Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:31.867036Z"},{"id":"UBUNTU-CVE-2019-17357","description":"Cacti through 1.2.7 is affected by a graphs.php?template_id= SQL injection vulnerability affecting how template identifiers are handled when a string and id composite value are used to identify the template type and id. An authenticated attacker can exploit this to extract data from the database, or an unauthenticated remote attacker could exploit this via Cross-Site Request Forgery.","status":"published","published":"2020-01-21T19:15:00Z","modified":"2025-09-08T16:45:38Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:20.325378Z"},{"id":"openSUSE-SU-2020:0272-1","title":"Security update for cacti, cacti-spine","description":"This update for cacti, cacti-spine fixes the following issues:\n\ncacti-spine was updated to version 1.2.9.\n\n\nSecurity issues fixed:\n\n- CVE-2009-4112: Fixed a privilege escalation (bsc#1122535).\n- CVE-2018-20723: Fixed a cross-site scripting (XSS) vulnerability (bsc#1122245).\n- CVE-2018-20724: Fixed a cross-site scripting (XSS) vulnerability (bsc#1122244).\n- CVE-2018-20725: Fixed a privilege escalation that could occur under certain conditions (bsc#1122535).\n- CVE-2018-20726: Fixed a cross-site scripting (XSS) vulnerability (bsc#1122242).\n- CVE-2019-16723: Fixed an authentication bypass vulnerability.\n- CVE-2019-17357: Fixed an SQL injection vulnerability (bsc#1158990).\n- CVE-2019-17358: Fixed an unsafe deserialization in sanitize_unserialize_selected_items (bsc#1158992).\n- CVE-2020-7106: Fixed a potential cross-site scripting (XSS) vulnerability (bsc#1163749).\n- CVE-2020-7237: Fixed a remote code execution that affected privileged users via shell metacharacters in the Performance Boost Debug Log field (bsc#1161297).\n\n\nNon-security issues fixed:\n\n- Fixed missing packages php-json, php-ctype, and php-gd in cacti.spec (boo#1101024).\n- Fixed Apache2.4 and Apache2.2 runtime configuration issue (boo#1101139).\n","status":"published","published":"2020-03-01T17:12:57Z","modified":"2026-02-04T02:27:29.270751Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2020:0284-1","title":"Security update for cacti, cacti-spine","description":"This update for cacti, cacti-spine fixes the following issues:\n\ncacti-spine was updated to version 1.2.9.\n\n\nSecurity issues fixed:\n\n- CVE-2009-4112: Fixed a privilege escalation (bsc#1122535).\n- CVE-2018-20723: Fixed a cross-site scripting (XSS) vulnerability (bsc#1122245).\n- CVE-2018-20724: Fixed a cross-site scripting (XSS) vulnerability (bsc#1122244).\n- CVE-2018-20725: Fixed a privilege escalation that could occur under certain conditions (bsc#1122535).\n- CVE-2018-20726: Fixed a cross-site scripting (XSS) vulnerability (bsc#1122242).\n- CVE-2019-16723: Fixed an authentication bypass vulnerability.\n- CVE-2019-17357: Fixed an SQL injection vulnerability (bsc#1158990).\n- CVE-2019-17358: Fixed an unsafe deserialization in sanitize_unserialize_selected_items (bsc#1158992).\n- CVE-2020-7106: Fixed a potential cross-site scripting (XSS) vulnerability (bsc#1163749).\n- CVE-2020-7237: Fixed a remote code execution that affected privileged users via shell metacharacters in the Performance Boost Debug Log field (bsc#1161297).\n\n\nNon-security issues fixed:\n\n- Fixed missing packages php-json, php-ctype, and php-gd in cacti.spec (boo#1101024).\n- Fixed Apache2.4 and Apache2.2 runtime configuration issue (boo#1101139).\n\nThis update was imported from the openSUSE:Leap:15.1:Update update project.","status":"published","published":"2020-03-02T12:20:59Z","modified":"2026-02-04T02:20:34.781286Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2020:0558-1","title":"Security update for cacti, cacti-spine","description":"This update for cacti, cacti-spine to version 1.2.11 fixes the following issues:\n\nThis update is fixing multiple vulnerabilities and adding bug fixes. For more details consult the changes file.\n","status":"published","published":"2020-04-27T18:18:08Z","modified":"2026-02-04T04:17:53.931354Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2020:0565-1","title":"Security update for cacti, cacti-spine","description":"This update for cacti, cacti-spine to version 1.2.11 fixes the following issues:\n\nThis update is fixing multiple vulnerabilities and adding bug fixes. For more details consult the changes file.\n\nThis update was imported from the openSUSE:Leap:15.1:Update update project.","status":"published","published":"2020-04-30T15:35:25Z","modified":"2026-02-04T04:29:57.268103Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:10670-1","title":"cacti-1.2.18-1.2 on GA media","description":"These are all security issues fixed in the cacti-1.2.18-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:13:56.743451Z","updated_at":"2026-11-02T16:58:34.487567Z"}]}}