CVE-2023-39358 - CVE House
Back to Database
Status published High CVE-2023-39358

Authenticated SQL injection vulnerability in reports_user.php in Cacti

Vulnerability Description

Cacti is an open source operational monitoring and fault management framework. An authenticated SQL injection vulnerability was discovered which allows authenticated users to perform privilege escalation and remote code execution. The vulnerability resides in the `reports_user.php` file. In `ajax_get_branches`, the `tree_id` parameter is passed to the `reports_get_branch_select` function without any validation. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-39358

Credits & Attribution

No credits recorded in the NVD database.

References

More from Cacti

View All →
CVE-2025-66399
SNMP Command Injection leads to RCE in Cacti
High 7.4
CVE-2025-26520
Cacti through 1.2.29 allows SQL injection in the template function...
High 7.6
CVE-2025-24368
Cacti has a SQL Injection vulnerability when using tree rules through Automation API
Medium 6.9
CVE-2025-24367
Cacti allows Arbitrary File Creation leading to RCE
High 8.7
CVE-2025-22604
Cacti has Authenticated RCE via multi-line SNMP responses
Critical 9.1

Affected Vendor

Affected Software

cacti
Vulnerable Versions:
< 1.2.25

Timeline

Official Publish: September 5th, 2023
Last Modified: February 13th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-89

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1059 Command and Scripting Interpreter
Execution
T1213.006 Databases
Collection
T1485 Data Destruction
Impact