CVE-2024-49754

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting XSS vulnerability in the API-Access page allows authenticated users to inject arbitrary JavaScript through the "token" parameter when creating a new API token. This vulnerability can result i...

CVE-2024-49754: Improper Neutralization of Input During Web Page Generation

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting XSS vulnerability in the API-Access page allows authenticated users to inject arbitrary JavaScript through the "token" parameter when creating a new API token. This vulnerability can result i...

CVE-2021-31274

In LibreNMS description variable. As a result, arbitrary Javascript code can get executed...

PT-2021-19231

Name of the Vulnerable Software and Affected Versions LibreNMS versions prior to 21.3.0 Description A stored XSS issue was identified in the API Access page due to insufficient sanitization of the $api-description variable, allowing arbitrary Javascript code to be executed. Recommendations For...

CVE-2021-31274: Improper Neutralization of Input During Web Page Generation

In LibreNMS description variable. As a result, arbitrary Javascript code can get executed...