Lucene search

GoogleOSV:GHSA-5229-94P3-7WWQ

HistoryAug 31, 2022 - 12:00 a.m.

LibreNMS vulnerable to Cross-Site Scripting (XSS)

2022-08-3100:00:19

Google

osv.dev

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

31.3%

JSON

LibreNMS version 22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component print-customoid.php.

CPENameOperatorVersion
librenms/librenmseq21.3.0
librenms/librenmseq1.65.1
librenms/librenmseq1.60
librenms/librenmseq1.50
librenms/librenmseq21.8.0
librenms/librenmseq1.22
librenms/librenmseq1.52
librenms/librenmseq1.22.01
librenms/librenmseq22.6.0
librenms/librenmseq1.69

Name	Operator	Version
librenms/librenms	eq	21.3.0
librenms/librenms	eq	1.65.1
librenms/librenms	eq	1.60
librenms/librenms	eq	1.50
librenms/librenms	eq	21.8.0
librenms/librenms	eq	1.22
librenms/librenms	eq	1.52
librenms/librenms	eq	1.22.01
librenms/librenms	eq	22.6.0
librenms/librenms	eq	1.69

Rows per page:

1-10 of 971

References

community.librenms.org/t/22-7-0-changelog/19213

github.com/librenms/librenms

github.com/librenms/librenms/commit/e5c91a0f835d59e058d9d3e4956e079476d59ee6

github.com/librenms/librenms/pull/14126

nvd.nist.gov/vuln/detail/CVE-2022-36745

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

31.3%

JSON

Related for OSV:GHSA-5229-94P3-7WWQ