.. / CVE-2023-30534

Exploit for Cacti < 1.2.25 Insecure Deserialization (CVE-2023-30534)

Description:

Cacti is an open source operational monitoring and fault management framework. There are two instances of insecure deserialization in Cacti version 1.2.24.

Nuclei Template

View the template here CVE-2023-30534.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2023/CVE-2023-30534.yaml
Copy

References:

https://nvd.nist.gov/vuln/detail/CVE-2023-30534
https://lists.fedoraproject.org/archives/list/[email protected]/message/WOQFYGLZBAWT4AWNMO7DU73QXWPXTCKH/
https://github.com/Cacti/cacti/security/advisories/GHSA-77rf-774j-6h3p
https://lists.fedoraproject.org/archives/list/[email protected]/message/CFH3J2WVBKY4ZJNMARVOWJQK6PSLPHFH/
https://www.fastly.com/blog/cve-2023-30534-insecure-deserialization-in-cacti-prior-to-1-2-25