writeups.xyz / Cacti: Unauthenticated Remote Code Execution

Submitter : c2a

Date: 3 January 2023

Bounty : undisclosed

Vulnerabilities :

• RCE
• Authentication Bypass
• OS Command Injection
• Security Code Review

Programs :

• Cacti

Authors :

• Stefan Schiller (@Scryh_)

Link :
https://www.sonarsource.com/blog/cacti-unauthenticated-remote-code-execution/