CVE-2014-2328

EPSS 1.1%

Published: 4/23/2014Modified: 5/27/2026

Description

lib/graph_export.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in unspecified vectors.

Affected packages (1)

Debian/cactifrom 0, < 0.8.8b+dfsg-4

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2014-2328