Patchwire CVEs, their patch status, and feeds to follow them

CVE-2014-2328

Fixed in a distro release EPSS 4%

lib/graph_export.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in unspecified vectors.

Published 2014-04-23 · CVE record · OSV

Products: cacti, fedoraproject fedora, opensuse, debian_linux

Distro releases

ReleasePackageFixed in
Debian 12cacti0.8.8b+dfsg-4
Debian 13cacti0.8.8b+dfsg-4
Debian 14cacti0.8.8b+dfsg-4
Debian 7cacti0.8.8a+dfsg-5+deb7u3
openSUSE Tumbleweedcacti0.8.8h-1.2