ZDI-23-1500: Cacti graph_view SQL Injection Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication or escalate privileges on affected installations of Cacti. Authentication is required to exploit this vulnerability when the product is in its default configuration.

attackers authentication authentication bypass bypass bypass vulnerability cacti configuration default exploit injection privileges product sql sql injection vulnerability zdi