CVE-2019-17357

Name	CVE-2019-17357
Description	Cacti through 1.2.7 is affected by a graphs.php?template_id= SQL injection vulnerability affecting how template identifiers are handled when a string and id composite value are used to identify the template type and id. An authenticated attacker can exploit this to extract data from the database, or an unauthenticated remote attacker could exploit this via Cross-Site Request Forgery.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub advisories/code/issues, web search, more)
Debian Bugs	947374

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
cacti (PTS)	buster	1.2.2+ds1-2+deb10u4	fixed
	buster (security)	1.2.2+ds1-2+deb10u5	fixed
	bullseye (security), bullseye	1.2.16+ds1-2+deb11u1	fixed
	bookworm, sid	1.2.24+ds1-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Debian Bugs
cacti	source	jessie	(not affected)
cacti	source	stretch	(not affected)
cacti	source	buster	1.2.2+ds1-2+deb10u2
cacti	source	(unstable)	1.2.8+ds1-1	947374

Notes

[stretch] - cacti <not-affected> (Vulnerable code not present)
[jessie] - cacti <not-affected> (Vulnerable code not present)
https://github.com/Cacti/cacti/issues/3025
https://github.com/Cacti/cacti/commit/d6dc48503bbcde0717e7a93df7638fd4796200f4