CVE-2023-4980

LibreNMS (librenms/librenms) has a generic Cross-site Scripting (XSS) vulnerability affecting versions prior to 23.9.0. Root cause details are not fully specified in the provided documents. Impact is described as XSS; no in-the-wild exploit details are given. Remediation: upgrade to version 23.9....

CVE-2023-4981 Cross-site Scripting (XSS) - DOM in librenms/librenms

Cross-site Scripting XSS - DOM in GitHub repository librenms/librenms prior to 23.9.0...

CVE-2023-4980 Cross-site Scripting (XSS) - Generic in librenms/librenms

Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 23.9.0...

CVE-2023-4981 Cross-site Scripting (XSS) - DOM in librenms/librenms

Cross-site Scripting XSS - DOM in GitHub repository librenms/librenms prior to 23.9.0...

CVE-2023-4980 Cross-site Scripting (XSS) - Generic in librenms/librenms

Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 23.9.0...

CVE-2023-4979 Cross-site Scripting (XSS) - Reflected in librenms/librenms

Cross-site Scripting XSS - Reflected in GitHub repository librenms/librenms prior to 23.9.0...

CVE-2023-4979

CVE-2023-4979: A reflected XSS in LibreNMS affects librenms/librenms prior to version 23.9.0. Descriptions from Red Hat and other sources confirm the issue is an XSS vulnerability exploited via user-supplied input reflected in responses. Publicly available connected documents do not provide expli...

CVE-2023-4978

LibreNMS (librenms/librenms) suffers a DOM-based XSS vulnerability in versions prior to 23.9.0. Reported across multiple sources (CVE-2023-4978) with surrounding references, the issue occurs in the frontend when unsanitized user input is reflected in the DOM. Impact is described as cross-site scr...

CVE-2023-4977

CVE-2023-4977 describes a code injection vulnerability in the LibreNMS project (librenms/librenms) prior to version 23.9.0. The root cause is insufficient sanitization in the search functionality (notably in search.inc.php), which can allow code injection/HTML injection. Multiple connected source...

CVE-2023-4977 Code Injection in librenms/librenms

Code Injection in GitHub repository librenms/librenms prior to 23.9.0...

CVE-2023-4978 Cross-site Scripting (XSS) - DOM in librenms/librenms

Cross-site Scripting XSS - DOM in GitHub repository librenms/librenms prior to 23.9.0...

CVE-2023-4978 Cross-site Scripting (XSS) - DOM in librenms/librenms

Cross-site Scripting XSS - DOM in GitHub repository librenms/librenms prior to 23.9.0...

CVE-2023-4979 Cross-site Scripting (XSS) - Reflected in librenms/librenms

Cross-site Scripting XSS - Reflected in GitHub repository librenms/librenms prior to 23.9.0...

CVE-2023-4977 Code Injection in librenms/librenms

Code Injection in GitHub repository librenms/librenms prior to 23.9.0...

CVE-2023-4978 Cross-site Scripting (XSS) - DOM in librenms/librenms

Cross-site Scripting XSS - DOM in GitHub repository librenms/librenms prior to 23.9.0...

LibreNMS Code Injection Vulnerability

LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of network environments and automatic updates. A code injection vulnerability exists in librenms versions prior to 23.9.0. An attacker...

LibreNMS Cross-Site Scripting Vulnerability

LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of network environments and automatic updates. A cross-site scripting vulnerability exists in versions prior to librenms 23.9.0. An...

LibreNMS Cross-Site Scripting Vulnerability

LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of network environments and automatic updates. A cross-site scripting vulnerability exists in LibreNMS versions prior to 23.9.0. An...

LibreNMS Cross-Site Scripting Vulnerability

LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of network environments and automatic updates. A cross-site scripting vulnerability exists in versions prior to librenms 23.9.0. An...

PT-2023-31358 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: librenms versions prior to 23.9.0 Description: The issue is related to Cross-site Scripting XSS - Generic. Recommendations: For versions prior to 23.9.0, update to version 23.9.0 or later to resolve the issue...