CVE-2022-0588

The CVE-2022-0588 entry refers to an information-disclosure vulnerability in librenms/librenms due to Missing Authorization prior to version 22.2.0. Multiple connected sources (Red Hat, OSV, CNVD, GHSA advisories, and PT-2022-13283) confirm that unauthorised access could expose sensitive informat...

CVE-2022-0588 Missing Authorization in librenms/librenms

Missing Authorization in Packagist librenms/librenms prior to 22.2.0...

CVE-2022-0588 Missing Authorization in librenms/librenms

Missing Authorization in Packagist librenms/librenms prior to 22.2.0...

CVE-2022-0587 Improper Authorization in librenms/librenms

Improper Authorization in Packagist librenms/librenms prior to 22.2.0...

CVE-2022-0587

Summary: CVE-2022-0587 affects the Librenms project (librenms/librenms) prior to version 22.2.0, due to improper authorization that could allow manipulation of plugins or user-accessible settings. Affected software: LibreNMS repository/librenms (Packagist distribution). Root cause / vulnerability...

CVE-2022-0587 Improper Authorization in librenms/librenms

Improper Authorization in Packagist librenms/librenms prior to 22.2.0...

Cross-site Scripting (XSS)

librenms/librenms is vulnerable to cross-site scriptingXSS attacks. The vulnerability exists due to the lack of sanitization in the Transport name field in the alert-transports.inc.php file allowing an attacker to inject and execute malicious javascript through the alerts module...

Cross-site Scripting (XSS)

librenms/librenms is vulnerable to cross-site scripting. The vulnerability exists in addhost.inc.php in sysName, Hardware and Community fields which allows an attacker to send and execute arbitrary javascript...

GHSA-HXMR-5GV9-6P8V Cross-site Scripting in librenms

Cross-site Scripting XSS - Stored in Packagist librenms/librenms prior to 22.2.0...

GHSA-RP34-85X3-3764 Cross-site Scripting in librenms

Cross-site Scripting XSS - Generic in Packagist librenms/librenms prior to 22.1.0...

Cross-site Scripting in librenms

Cross-site Scripting XSS - Generic in Packagist librenms/librenms prior to 22.1.0...

Cross-site Scripting in librenms

Cross-site Scripting XSS - Stored in Packagist librenms/librenms prior to 22.2.0...

Librenms 授权问题漏洞

Librenms is an open source network monitoring system based on PHP and MySQL from the Librenms community. The system features customizable alerts, auto-discovery of network environments, and automatic updates. An authorization issue vulnerability exists in librenms that stems from improper...

PT-2022-13283 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: librenms/librenms versions prior to 22.2.0 Description: The issue concerns exposure of sensitive information to unauthorized actors due to missing authorization. Recommendations: For versions prior to 22.2.0, update to version 22.2.0 or later...

Librenms 信息泄露漏洞

Librenms is a PHP and MySQL based open source network monitoring system from the Librenms community. The system features custom alerts, auto-discovery of network environments and automatic updates. librenms suffers from an information disclosure vulnerability that stems from allowing users with...

Librenms 跨站脚本漏洞

Librenms is a PHP and MySQL based open source network monitoring system from the Librenms community. The system features custom alerts, auto-discovery of network environments and automatic updates. librenms suffers from a cross-site scripting vulnerability that stems from a lack of data validatio...

CVE-2022-0580

Incorrect Authorization in Packagist librenms/librenms prior to 22.2.0...

CVE-2022-0580

Incorrect Authorization in Packagist librenms/librenms prior to 22.2.0...

Authorization

Incorrect Authorization in Packagist librenms/librenms prior to 22.2.0...

CVE-2022-0580

CVE-2022-0580 corresponds to an improper access control/incorrect authorization issue in the Librenms project. Multiple connected sources (e.g., Red Hat, GHSA, OSV) describe it as affecting librenms/librenms prior to version 22.2.0, caused by an authorization flaw that could enable access to feat...