CVE-2023-39516: 
Cacti vulnerability analysis and mitigation

Cacti is an open source operational monitoring and fault management framework affected by a Stored Cross-Site-Scripting (XSS) vulnerability (CVE-2023-39516) discovered in September 2023. The vulnerability allows an authenticated user with 'General Administration>Sites/Devices/Data' permissions to poison data stored in the Cacti's database through the data_sources.php script, which can then be executed when viewed by administrative Cacti accounts (GitHub Advisory).

The vulnerability exists in the datasources.php script which displays data source management information like data source paths and polling configurations. An adversary with appropriate permissions can configure a malicious data-source path through http:///cacti/datasources.php, which can then deploy a stored XSS attack against any user with the same or broader privileges. The vulnerability has been assigned a CVSS v3.1 base score of 6.1 MEDIUM (Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N) (GitHub Advisory).

When exploited, this vulnerability allows attackers to execute JavaScript code in victims' browsers at view-time, potentially leading to account takeover, performing arbitrary actions on the platform as the victim user, redirecting users to malicious websites, stealing sensitive information, running browser-related exploits, or participating in DDoS attacks (GitHub Advisory).

This vulnerability has been fixed in Cacti version 1.2.25. Users are strongly advised to upgrade to this version or later. For users unable to upgrade immediately, it is recommended to manually escape HTML output. The fix involves proper handling of user-supplied information by either making it a text element in the rendered HTML or escaping the content using HTML entities (GitHub Advisory, Debian LTS).

The vulnerability has been acknowledged and addressed by multiple Linux distributions including Debian and Fedora, which have released security updates to patch the vulnerability. Debian classified it as part of a larger security update addressing multiple vulnerabilities in Cacti (Debian Security, Fedora Update).