Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-54145

Cacti is an open source performance and fault management framework. Cacti has a SQL injection vulnerability in the get_discovery_results function of automation_devices.php using the network parameter. This vulnerability is fixed in 1.2.29.

Published

2025-01-27T17:15:16.240

Last Modified

2025-03-04T16:58:13.337

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.3 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-89
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application cacti cacti < 1.2.29 Yes
References