CVE-2020-13231: 
Cacti vulnerability analysis and mitigation

In Cacti before version 1.2.11, a vulnerability was discovered in the auth_profile.php file when using the action=edit parameter. The vulnerability (CVE-2020-13231) was disclosed on May 20, 2020, and affects the user profile management functionality of Cacti installations (NVD, MITRE).

The vulnerability is a Cross-Site Request Forgery (CSRF) issue that allows an attacker to modify an administrator's email address through a malformed GET request to the auth_profile.php endpoint. The vulnerability exists due to the lack of proper CSRF protection tokens and the use of GET method for sensitive operations (GitHub Issue).

If successfully exploited, an attacker could change an administrator's email address without proper authorization. This could potentially lead to account takeover scenarios if combined with password reset functionality (Ubuntu Notice).

The vulnerability requires user interaction and can be exploited by sending a malformed URL to a logged-in administrator. The attack vector is network-based, and the exploitation requires the victim to be authenticated and to interact with the malicious request (AttackerKB).

The vulnerability was fixed in Cacti version 1.2.11. The fix includes implementing proper CSRF protection mechanisms and improving the handling of profile editing operations. Users are advised to upgrade to version 1.2.11 or later to address this security issue (GitHub Release).

The vulnerability was acknowledged by multiple Linux distributions, including Fedora and Ubuntu, which released security updates to address the issue. Fedora released updates for both version 31 and 32 to patch the vulnerability (Fedora Update).