WS-2026-0037

The Oxidized integration URL in LibreNMS is admin-configurable. LibreNMS fetches device info and version history from that URL and renders the returned JSON fields name, ip, model, author and commit message into HTML without escaping in includes/html/pages/device/showconfig.inc.php, so an...

CVE-2021-44278

Librenms 21.11.0 is affected by a path traversal vulnerability in includes/html/pages/device/showconfig.inc.php, enabling manipulation of the requested path to access files outside the intended directory. Multiple connected advisories (GHSA-7289-CHWJ-7H86, OSV:GHSA-7289-CHWJ-7H86, CNVD/CNNVD, Ver...

CVE-2021-44278

Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php...

CVE-2021-44278

Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php...

PT-2021-24077

Name of the Vulnerable Software and Affected Versions: Librenms version 21.11.0 Description: The issue is related to a path manipulation vulnerability. It affects the includes/html/pages/device/showconfig.inc.php file. Recommendations: For Librenms version 21.11.0, at the moment, there is no...

CVE-2021-44278: Improper Limitation of a Pathname to a Restricted Directory

Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php...