CVE-2024-51092

LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutController.php's index, SettingsController.php's update, and PollDevice.php's initRrdDirectory...

CVE-2024-51092

LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutController.php's index, SettingsController.php's update, and PollDevice.php's initRrdDirectory...

CVE-2024-51092

LibreNMS versions prior to 24.10.0 are vulnerable to authenticated OS command injection leading to arbitrary code execution . An attacker can exploit a flaw in the PollDevice.php 's initRrdDirectory() method to create directories with shell metacharacters by providing a malformed hostname. Combin...