Lucene search

K
huntrHainguyen0207470B9B13-B7FE-4B3F-A186-FDC5DC193976
HistoryAug 19, 2023 - 3:40 p.m.

DOM XSS in https://demo.librenms.org/ports

2023-08-1915:40:55
hainguyen0207
www.huntr.dev
13
xss
security flaw
proof of concept
video poc
bugbounty
domains

0.0004 Low

EPSS

Percentile

14.1%

Description

I noticed, your website is very secure.

But you overlooked a flaw XSS

Detail:

1 .Login with demo account.

2 .Go to the link: https://demo.librenms.org/ports

3 .Insert payload and press enter:

 test' onclick='alert(document.cookie)

4 .Click on the box hostname or port, detect XSS

Proof of Concept

Video Poc

https://drive.google.com/file/d/1cI0mEezarvgdn5t3iJ6ILl-LSXZL0_Ek/view?usp=sharing

0.0004 Low

EPSS

Percentile

14.1%

Related for 470B9B13-B7FE-4B3F-A186-FDC5DC193976