Launchpad.net

CVE 2023-46490

SQL Injection vulnerability in Cacti v1.2.25 allows a remote attacker to obtain sensitive information via the form_actions() function in the managers.php function.

See the CVE page on Mitre.org for more details.