{"id":"CVE-2020-14295","aliases":["ALPINE-CVE-2020-14295","DEBIAN-CVE-2020-14295","EUVD-2020-6448","GHSA-rwpv-9gq4-x5g3","UBUNTU-CVE-2020-14295","USN-5214-1","openSUSE-SU-2020:1060-1","openSUSE-SU-2020:1106-1","openSUSE-SU-2024:10670-1"],"status":"published","title":"A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter...","description":"A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts stacked queries.","severity":{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.86062,"percentile":0.99734,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-89"],"published":"2020-06-17T13:47:36Z","modified":"2026-11-04T20:01:36Z","exploits":[{"source":"metasploit","id":"exploit/unix/http/cacti_filter_sqli_rce","title":"Cacti color filter authenticated SQLi to RCE","type":"exploit","platform":"PHP","date":"2020-06-17","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/unix/http/cacti_filter_sqli_rce"},{"source":"pocgithub","id":"0z09e/CVE-2020-14295","title":"0z09e/CVE-2020-14295","date":"2021-04-28","url":"https://github.com/0z09e/CVE-2020-14295"},{"source":"exploitdb","id":"EDB-49810","title":"Cacti 1.2.12 - 'filter' SQL Injection","type":"webapps","platform":"php","date":"2021-04-29","url":"https://www.exploit-db.com/exploits/49810"},{"source":"pocgithub","id":"mrg3ntl3m4n/CVE-2020-14295","title":"mrg3ntl3m4n/CVE-2020-14295","date":"2021-05-28","url":"https://github.com/mrg3ntl3m4n/CVE-2020-14295"}],"fixes":[{"ecosystem":"Alpine:v3.13","package":"cacti","fixed_in":["1.2.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"cacti","fixed_in":["1.2.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"cacti","fixed_in":["1.2.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"cacti","fixed_in":["1.2.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"cacti","fixed_in":["1.2.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"cacti","fixed_in":["1.2.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"cacti","fixed_in":["1.2.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"cacti","fixed_in":["1.2.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"cacti","fixed_in":["1.2.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"cacti","fixed_in":["1.2.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"cacti","fixed_in":["1.2.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"cacti","fixed_in":["1.2.13-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"cacti","fixed_in":["1.2.13+ds1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"cacti","fixed_in":["1.2.13+ds1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cacti","fixed_in":["1.2.13+ds1-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"cacti","fixed_in":["1.1.38+ds1-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"cacti","fixed_in":["1.2.10+ds1-1ubuntu1+esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.13","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13+ds1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13+ds1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13+ds1-1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.38+ds1-1ubuntu0.1~esm1"}]}],"versions":["1.1.18+ds1-1","1.1.27+ds1-2","1.1.27+ds1-3","1.1.28+ds1-2","1.1.35+ds1-1","1.1.36+ds1-1","1.1.38+ds1-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.10+ds1-1ubuntu1+esm1"}]}],"versions":["1.2.4+ds1-2ubuntu3","1.2.9+ds1-1ubuntu1","1.2.9+ds1-1ubuntu2","1.2.10+ds1-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.8f+ds1-4ubuntu4.16.04.2+esm1"}]}],"versions":["0.8.8f+ds1-2","0.8.8f+ds1-3","0.8.8f+ds1-4","0.8.8f+ds1-4ubuntu1","0.8.8f+ds1-4ubuntu2","0.8.8f+ds1-4ubuntu3","0.8.8f+ds1-4ubuntu4","0.8.8f+ds1-4ubuntu4.16.04","0.8.8f+ds1-4ubuntu4.16.04.1","0.8.8f+ds1-4ubuntu4.16.04.2"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.38+ds1-1ubuntu0.1~esm1"}]}],"versions":["1.1.18+ds1-1","1.1.27+ds1-2","1.1.27+ds1-3","1.1.28+ds1-2","1.1.35+ds1-1","1.1.36+ds1-1","1.1.38+ds1-1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.10+ds1-1ubuntu1+esm1"}]}],"versions":["1.2.4+ds1-2ubuntu3","1.2.9+ds1-1ubuntu1","1.2.9+ds1-1ubuntu2","1.2.10+ds1-1ubuntu1"],"bundled":5},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-11.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"cacti-spine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-8.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-11.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"cacti-spine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-8.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-11.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"cacti-spine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-8.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP1","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-bp151.4.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP1","package":"cacti-spine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-bp151.4.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.18-1.2"}]}],"bundled":31}],"products":[{"vendor":"cacti","product":"cacti"},{"vendor":"fedoraproject","product":"fedora"}],"references":[{"url":"https://github.com/Cacti/cacti/issues/3622","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKM5G3YNSZDHDZMPCMAHG5B5M2V4XYSE/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W64CIB6L4HZRVQSWKPDDKXJO4J2XTOXD/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00067.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link","web"]},{"url":"https://security.gentoo.org/glsa/202007-03","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00085.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link","web"]},{"url":"http://packetstormsecurity.com/files/162384/Cacti-1.2.12-SQL-Injection-Remote-Code-Execution.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry","evidence"]},{"url":"http://packetstormsecurity.com/files/162918/Cacti-1.2.12-SQL-Injection-Remote-Command-Execution.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry","evidence"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14295"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W64CIB6L4HZRVQSWKPDDKXJO4J2XTOXD/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKM5G3YNSZDHDZMPCMAHG5B5M2V4XYSE/"},{"url":"https://github.com/advisories/GHSA-rwpv-9gq4-x5g3"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-14295","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-14295","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-14295","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5214-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-14295","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-13230","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-13231","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-14424","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-35701","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VVPI65AW45TXMRAYCWJ6YJT3LF4GIMWL/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1115436","tags":["report"]},{"url":"https://bugzilla.suse.com/1154087","tags":["report"]},{"url":"https://bugzilla.suse.com/1173090","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14295","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4IXKYESUUIOBHBKL32YKWOWHSJKS7RN3/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-6799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16660","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16661","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8813","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-14295","description":"A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts stacked queries.","status":"published","published":"2020-06-17T13:47:36Z","modified":"2024-08-04T12:39:36.215Z","updated_at":"2026-11-02T14:35:46.873079Z"}],"euvd":[{"id":"EUVD-2020-6448","description":"A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts stacked queries.","status":"published","published":"2020-06-17T13:47:36Z","modified":"2024-08-04T12:39:36Z","updated_at":"2026-11-03T03:07:34.636169Z"}],"ghsa":[{"id":"GHSA-rwpv-9gq4-x5g3","title":"A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter...","description":"A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts stacked queries.","status":"published","published":"2022-05-24T17:20:46Z","modified":"2023-01-28T05:02:45Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:43:50.187003Z"}],"nvd":[{"id":"CVE-2020-14295","description":"A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts stacked queries.","status":"published","published":"2020-06-17T14:15:10.617Z","modified":"2026-06-17T02:54:28.997Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:06:07.249892Z"}],"osv":[{"id":"ALPINE-CVE-2020-14295","description":"A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts stacked queries.","status":"published","published":"2020-06-17T14:15:10.617Z","modified":"2026-11-03T06:32:23.71596325Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:17:57.723967Z"},{"id":"CVE-2020-14295","description":"A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts stacked queries.","status":"published","published":"2020-06-17T14:15:10.617Z","modified":"2026-10-20T10:51:49.34708535Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:14.418339Z"},{"id":"DEBIAN-CVE-2020-14295","description":"A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts stacked queries.","status":"published","published":"2020-06-17T14:15:10.617Z","modified":"2026-10-26T12:00:40.930696542Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:32.862554Z"},{"id":"UBUNTU-CVE-2020-14295","description":"A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts stacked queries.","status":"published","published":"2020-06-17T14:15:00Z","modified":"2026-11-04T20:01:36.788450055Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-06T14:21:54.946607Z"},{"id":"openSUSE-SU-2020:1060-1","title":"Security update for cacti, cacti-spine","description":"This update for cacti, cacti-spine fixes the following issues:\n\n- cacti 1.2.13:\n\n  * Query XSS vulnerabilities require vendor package update\n    (CVE-2020-11022 / CVE-2020-11023)\n  * Lack of escaping on some pages can lead to XSS exposure\n  * Update PHPMailer to 6.1.6 (CVE-2020-13625)\n  * SQL Injection vulnerability due to input validation failure when\n    editing colors (CVE-2020-14295, boo#1173090)\n  * Lack of escaping on template import can lead to XSS exposure\n\n- switch from cron to systemd timers (boo#1115436):\n  + cacti-cron.timer\n  + cacti-cron.service\n- avoid potential root escalation on systems with fs.protected_hardlinks=0\n  (boo#1154087): handle directory permissions in file section instead\n  of using chown during post installation\n- rewrote apache configuration to get rid of .htaccess files and \n  explicitely disable directory permissions per default \n  (only allow a limited, well-known set of directories)\n\n","status":"published","published":"2020-07-25T18:21:21Z","modified":"2026-02-04T04:27:08.288093Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:1106-1","title":"Security update for cacti, cacti-spine","description":"This update for cacti, cacti-spine fixes the following issues:\n\n- cacti 1.2.13:\n\n  * Query XSS vulnerabilities require vendor package update\n    (CVE-2020-11022 / CVE-2020-11023)\n  * Lack of escaping on some pages can lead to XSS exposure\n  * Update PHPMailer to 6.1.6 (CVE-2020-13625)\n  * SQL Injection vulnerability due to input validation failure when\n    editing colors (CVE-2020-14295, boo#1173090)\n  * Lack of escaping on template import can lead to XSS exposure\n\n- switch from cron to systemd timers (boo#1115436):\n  + cacti-cron.timer\n  + cacti-cron.service\n- avoid potential root escalation on systems with fs.protected_hardlinks=0\n  (boo#1154087): handle directory permissions in file section instead\n  of using chown during post installation\n- rewrote apache configuration to get rid of .htaccess files and \n  explicitely disable directory permissions per default \n  (only allow a limited, well-known set of directories)\n\n\nThis update was imported from the openSUSE:Leap:15.1:Update update project.","status":"published","published":"2020-07-27T21:28:47Z","modified":"2026-02-04T02:54:37.245476Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2024:10670-1","title":"cacti-1.2.18-1.2 on GA media","description":"These are all security issues fixed in the cacti-1.2.18-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:13:56.743451Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"USN-5214-1","title":"cacti vulnerabilities","description":"It was discovered that Cacti was incorrectly validating permissions\nfor user accounts that had been recently disabled. An authenticated\nattacker could possibly use this to obtain unauthorized access to\napplication and system data. (CVE-2020-13230)\n\nIt was discovered that Cacti was incorrectly performing authorization\nchecks in auth_profile.php. A remote unauthenticated attacker could\nuse this to perform a CSRF attack and set a new admin email or make\nother changes. This issue only affected Ubuntu 18.04 ESM and\nUbuntu 20.04 ESM. (CVE-2020-13231)\n\nIt was discovered that Cacti incorrectly handled user provided input\nsent through request parameters to the color.php script. A remote\nauthenticated attacker could use this issue to perform SQL injection\nattacks. This issue only affected Ubuntu 18.04 ESM and Ubuntu 20.04 ESM.\n(CVE-2020-14295)\n\nIt was discovered that Cacti did not properly escape file input fields\nwhen performing template import operations for various themes. An\nauthenticated attacker could use this to perform XSS attacks. This issue\nonly affected Ubuntu 18.04 ESM and Ubuntu 20.04 ESM. (CVE-2020-14424)\n\nIt was discovered that Cacti incorrectly handled user provided input\nsent through request parameters to the data_debug.php script. A remote\nauthenticated attacker could use this issue to perform SQL injection\nattacks. This issue only affected Ubuntu 20.04 ESM. (CVE-2020-35701)\n","status":"published","published":"2022-06-09T09:14:15Z","modified":"2026-06-25T13:30:55.043665956Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}