3 matches found
CVE-2024-53457
The LibreNMS network monitoring system versions v24.9.0 through v24.10.0 are susceptible to a stored cross-site scripting (XSS) vulnerability in the Device Settings section. The root cause is a lack of protective measures when processing the Display Name parameter, allowing an attacker to inject ...
CVE-2024-53457
A stored cross-site scripting XSS vulnerability in the Device Settings section of LibreNMS v24.9.0 to v24.10.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Display Name parameter...
CVE-2024-53457
A stored cross-site scripting XSS vulnerability in the Device Settings section of LibreNMS v24.9.0 to v24.10.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Display Name parameter...