PT-2023-31366 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: librenms versions prior to 23.9.0 Description: The issue is related to Cross-site Scripting XSS - DOM, which occurs when an application includes user input in its output without proper validation or escaping. This allows an attacker to inject...

LibreNMS Cross-Site Scripting Vulnerability

LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of network environments and automatic updates. A cross-site scripting vulnerability exists in librenms versions prior to 23.9.0. An...

PT-2023-31351 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: librenms versions prior to 23.9.0 Description: The issue is related to Cross-site Scripting XSS - Reflected in the GitHub repository librenms/librenms. This type of attack occurs when an application includes user input in its responses withou...

LibreNMS Cross-Site Scripting Vulnerability

LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of network environments and automatic updates. A cross-site scripting vulnerability exists in versions prior to librenms 23.9.0. An...

PT-2023-31349 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: librenms versions prior to 23.9.0 Description: The issue is related to Cross-site Scripting XSS - DOM, which occurs when an application includes user input in its output without proper validation or escaping, allowing an attacker to inject...

LibreNMS Code Injection Vulnerability

LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of network environments and automatic updates. A code injection vulnerability exists in librenms versions prior to 23.9.0. An attacker...

Cross-site Scripting (XSS)

librenms/librenms is vulnerable to Cross-site Scripting XSS. The vulnerability exists due to lack of sanitization of user inputs in multiple files which allows an attacker to inject and execute arbitrary javascript...

LibreNMS Cross-Site Scripting Vulnerability (CNVD-2023-64109)

LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of the network environment and automatic updates. A cross-site scripting vulnerability exists in LibreNMS versions prior to 23.8.0. The...

LibreNMS Cross-site Scripting vulnerability

Cross-site Scripting XSS - Reflected in GitHub repository librenms/librenms 23.7.0 and prior. A patch is available at commit 91c57a1ee54631e071b6b0c952d99c8ee892e824 and anticiapted to be part of version 23.8.0...

GHSA-M6PF-CM3F-7876 LibreNMS Cross-site Scripting vulnerability

Cross-site Scripting XSS - Reflected in GitHub repository librenms/librenms 23.7.0 and prior. A patch is available at commit 91c57a1ee54631e071b6b0c952d99c8ee892e824 and anticiapted to be part of version 23.8.0...

CVE-2023-4347

Cross-site Scripting XSS - Reflected in GitHub repository librenms/librenms prior to 23.8.0...

Cross site scripting

Cross-site Scripting XSS - Reflected in GitHub repository librenms/librenms prior to 23.8.0...

CVE-2023-4347 Cross-site Scripting (XSS) - Reflected in librenms/librenms

Cross-site Scripting XSS - Reflected in GitHub repository librenms/librenms prior to 23.8.0...

CVE-2023-4347 Cross-site Scripting (XSS) - Reflected in librenms/librenms

Cross-site Scripting XSS - Reflected in GitHub repository librenms/librenms prior to 23.8.0...

CVE-2023-4347

CVE-2023-4347 is a reflected Cross-site Scripting (XSS) vulnerability in the LibreNMS project. The issue affects librenms/librenms versions prior to 23.8.0, arising from insufficient input filtering/escaping for user-controlled data, enabling arbitrary JavaScript in responses. Multiple connected ...

CVE-2023-4347 Cross-site Scripting (XSS) - Reflected in librenms/librenms

Cross-site Scripting XSS - Reflected in GitHub repository librenms/librenms prior to 23.8.0...

LibreNMS 跨站脚本漏洞

LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of the network environment and automatic updates. A cross-site scripting vulnerability exists in LibreNMS versions prior to 23.8.0. The...

PT-2023-28834 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: librenms/librenms versions prior to 23.8.0 Description: The issue is related to Cross-site Scripting XSS - Reflected in the GitHub repository librenms/librenms. This type of attack occurs when an application includes user input in its respons...

Reflected XSS

Description Reflected Cross-Site Scripting XSS vulnerability in LibreNMS 22.12.0 - Fri Dec 30 2022 10:11:51 GMT+0100 allows attackers to execute arbitrary external javascript code in the browser affected from /ports/group parameter. 1. Login 2. Navigate PoC link Proof of Concept...

SNMP location XSS vulnerability

Description By including some HTML in the "Location" field of the snmpd configuration of a managed device, an attacker can inject HTML into the LibreNMS "Devices" tab, which then gets rendered when the page is viewed. EDIT: I'm having difficulties developing a proper exploit for this beyond the...