CVE-2023-49086

Summary

CVE-2023-49086 is a newly discovered vulnerability affecting the Cacti network monitoring tool, specifically in versions prior to 1.2.27. This issue resurfaces despite a previous fix for CVE-2023-39360, rendering it a DOM XSS (Cross-Site Scripting) security risk. An authorized user can potentially exploit this vulnerability in the `graphs_new.php` component, leading to the execution of arbitrary JavaScript code within the attacked user's browser. This issue poses a significant threat as it can be utilized to steal sensitive information or gain unauthorized access. The vulnerability has been rectified in Cacti version 1.2.27.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.