6 matches found
CVE-2022-4068
A user is able to enable their own account if it was disabled by an admin while the user still holds a valid session. Moreover, the username is not properly sanitized in the admin user overview. This enables an XSS attack that enables an attacker with a low privilege user to execute arbitrary...
CVE-2022-4068
creationtimestamp| type| source ---|---|--- 2022-11-20 07:31:00+00:00| seen| https://t.me/cibsecurity/53211 2025-04-25 19:07:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13497...
CVE-2022-4068 Improperly Controlled Modification of Dynamically-Determined Object Attributes in librenms/librenms
A user is able to enable their own account if it was disabled by an admin while the user still holds a valid session. Moreover, the username is not properly sanitized in the admin user overview. This enables an XSS attack that enables an attacker with a low privilege user to execute arbitrary...
CVE-2022-4068
LibreNMS vulnerability CVE-2022-4068 allows a user to re-enable their own account if their session remains valid and enables XSS via unsanitized usernames in the admin user overview. Root cause cited as improper/dynamically determined attribute handling with insufficient input sanitization in the...
CVE-2022-4068 Improperly Controlled Modification of Dynamically-Determined Object Attributes in librenms/librenms
A user is able to enable their own account if it was disabled by an admin while the user still holds a valid session. Moreover, the username is not properly sanitized in the admin user overview. This enables an XSS attack that enables an attacker with a low privilege user to execute arbitrary...
CVE-2022-4068 Improperly Controlled Modification of Dynamically-Determined Object Attributes in librenms/librenms
A user is able to enable their own account if it was disabled by an admin while the user still holds a valid session. Moreover, the username is not properly sanitized in the admin user overview. This enables an XSS attack that enables an attacker with a low privilege user to execute arbitrary...