[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$faYaoF2xspbnTkV5nWdPBAgelzHVt1b5r8ce25kMdxo4":3,"g5a-risk:CVE-2023-49084":130},{"success":4,"data":5,"meta":127},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":26,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":46,"references":47,"referencesCount":66,"weaknesses":67,"weaknessesCount":46,"isActivelyExploited":76,"cisaInfo":26,"otxData":26,"relatedBlogPosts":77,"seoMetadata":78,"configurations":103,"relatedVendorCves":111,"notableEvents":112},"CVE-2023-49084","What is CVE-2023-49084?","Cacti is a robust performance and fault management framework and a frontend to RRDTool - a Time Series Database (TSDB). While using the detected SQL Injection and insufficient processing of the include file path, it is possible to execute arbitrary code on the server. Exploitation of the vulnerability is possible for an authorized user. The vulnerable component is the `link.php`. Impact of the vulnerability execution of arbitrary code on the server.","Cacti is a robust performance and fault management framework and a frontend to RRDTool - a Time Series Database (TSDB). While using the detected SQL Injectio...","2023-12-21T23:15:09.337","2024-06-10T17:16:15.15",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":36,"ImpactScore":37},"security-advisories@github.com","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":25,"PrivilegesRequired":25,"UserInteraction":23,"Scope":34,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":35,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:H\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H","CHANGED",8,1.3,6,0.63774,[38,38,38,38,38,38,38],"High",[42],{"vendor":43,"product":43,"version":44,"criteria":45,"vulnerable":4},"cacti","1.2.25","cpe:2.3:a:cacti:cacti:1.2.25:*:*:*:*:*:*:*",1,[48,52,58,62],{"url":49,"source":50,"tags":51},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F176995\u002FCacti-pollers.php-SQL-Injection-Remote-Code-Execution.html","Packetstormsecurity",[],{"url":53,"source":54,"tags":55},"https:\u002F\u002Fgithub.com\u002FCacti\u002Fcacti\u002Fsecurity\u002Fadvisories\u002FGHSA-pfh9-gwm6-86vp","GitHub",[56,57],"Exploit","Vendor Advisory",{"url":59,"source":60,"tags":61},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F03\u002Fmsg00018.html","Debian",[],{"url":63,"source":64,"tags":65},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FRBEOAFKRARQHTDIYSL723XAFJ2Q6624X\u002F","Fedoraproject",[],4,[68],{"id":69,"name":70,"description":71,"extendedDescription":72,"status":73,"abstraction":74,"structure":75},"CWE-98","Improper Control of Filename for Include\u002FRequire Statement in PHP Program ('PHP Remote File Inclusion')","The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in \"require,\" \"include,\" or similar functions.","In certain versions and configurations of PHP, this can allow an attacker to specify a URL to a remote location from which the product will obtain the code to execute. In other cases in association with path traversal, the attacker can specify a local file that may contain executable statements that can be parsed by PHP.","Draft","Variant","Simple",false,[],{"title":79,"metaDescription":80,"keywords":81,"canonicalUrl":82,"structuredData":83},"What is CVE-2023-49084? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2023-49084, a high severity cyber security vulnerability from 2023. High exploit probability (63.8%). Cacti is a robust perform...","CVE-2023-49084, CVE-2023-49084 vulnerability, CVE-2023-49084 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, cacti security, cacti vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2023-49084",{"@context":84,"@type":85,"headline":79,"description":80,"datePublished":10,"dateModified":11,"author":86,"publisher":90,"about":94,"mainEntityOfPage":98,"articleSection":101,"keywords":102},"https:\u002F\u002Fschema.org","TechArticle",{"@type":87,"name":88,"url":89},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":87,"name":88,"url":89,"logo":91},{"@type":92,"url":93},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":95,"name":6,"description":96,"additionalType":97},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":99,"@id":100},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2023-49084","Cybersecurity","CVE-2023-49084, CVE-2023-49084 vulnerability, CVE-2023-49084 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[104],{"Operator":26,"Negate":26,"Nodes":105},[106],{"Operator":107,"Negate":26,"CPEMatch":108},"OR",[109],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":110,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"EF5814EC-CFCB-4066-9260-FF78B45E2089",[],[113,120],{"id":114,"eventType":115,"eventTime":116,"details":117,"label":118,"color":119},"a5c41056-cfd1-4dc9-9d61-7409c15f2ce3","HIGH_EPSS_DELTA","2025-06-11T10:10:11.966761+00:00","Daily EPSS score increased by 0.413 on 2023-12-30","EPSS Score Increased","red",{"id":121,"eventType":122,"eventTime":123,"details":124,"label":125,"color":126},"39e9af44-4943-4a8a-b134-9107ecc7abce","LOW_EPSS_DELTA","2025-11-19T04:05:04.665855+00:00","Daily EPSS score decreased by 0.411 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":128,"version":129},1793219254452,"2.0",{"score":131,"band":132,"action":133,"scoredAt":134},64,"Medium","Plan remediation","2026-07-01T10:31:36.214056+00:00"]