PT-2023-31372 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: librenms versions prior to 23.9.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository librenms/librenms. Recommendations: For versions prior to 23.9.0, update to version 23.9.0 or later ...

PT-2023-31366 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: librenms versions prior to 23.9.0 Description: The issue is related to Cross-site Scripting XSS - DOM, which occurs when an application includes user input in its output without proper validation or escaping. This allows an attacker to inject...

LibreNMS Cross-Site Scripting Vulnerability

LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of network environments and automatic updates. A cross-site scripting vulnerability exists in librenms versions prior to 23.9.0. An...

PT-2023-31351 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: librenms versions prior to 23.9.0 Description: The issue is related to Cross-site Scripting XSS - Reflected in the GitHub repository librenms/librenms. This type of attack occurs when an application includes user input in its responses withou...

LibreNMS Cross-Site Scripting Vulnerability

LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of network environments and automatic updates. A cross-site scripting vulnerability exists in versions prior to librenms 23.9.0. An...

PT-2023-31349 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: librenms versions prior to 23.9.0 Description: The issue is related to Cross-site Scripting XSS - DOM, which occurs when an application includes user input in its output without proper validation or escaping, allowing an attacker to inject...

Cross-site Scripting (XSS)

librenms/librenms is vulnerable to Cross-site Scripting XSS. The vulnerability exists due to lack of sanitization of user inputs in multiple files which allows an attacker to inject and execute arbitrary javascript...

LibreNMS Cross-Site Scripting Vulnerability (CNVD-2023-64109)

LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of the network environment and automatic updates. A cross-site scripting vulnerability exists in LibreNMS versions prior to 23.8.0. The...

LibreNMS Cross-site Scripting vulnerability

Cross-site Scripting XSS - Reflected in GitHub repository librenms/librenms 23.7.0 and prior. A patch is available at commit 91c57a1ee54631e071b6b0c952d99c8ee892e824 and anticiapted to be part of version 23.8.0...

GHSA-M6PF-CM3F-7876 LibreNMS Cross-site Scripting vulnerability

Cross-site Scripting XSS - Reflected in GitHub repository librenms/librenms 23.7.0 and prior. A patch is available at commit 91c57a1ee54631e071b6b0c952d99c8ee892e824 and anticiapted to be part of version 23.8.0...

CVE-2023-4347

Cross-site Scripting XSS - Reflected in GitHub repository librenms/librenms prior to 23.8.0...

Cross site scripting

Cross-site Scripting XSS - Reflected in GitHub repository librenms/librenms prior to 23.8.0...

CVE-2023-4347 Cross-site Scripting (XSS) - Reflected in librenms/librenms

Cross-site Scripting XSS - Reflected in GitHub repository librenms/librenms prior to 23.8.0...

CVE-2023-4347

CVE-2023-4347 is a reflected Cross-site Scripting (XSS) vulnerability in the LibreNMS project. The issue affects librenms/librenms versions prior to 23.8.0, arising from insufficient input filtering/escaping for user-controlled data, enabling arbitrary JavaScript in responses. Multiple connected ...

CVE-2023-4347 Cross-site Scripting (XSS) - Reflected in librenms/librenms

Cross-site Scripting XSS - Reflected in GitHub repository librenms/librenms prior to 23.8.0...

CVE-2023-4347 Cross-site Scripting (XSS) - Reflected in librenms/librenms

Cross-site Scripting XSS - Reflected in GitHub repository librenms/librenms prior to 23.8.0...

LibreNMS 跨站脚本漏洞

LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of the network environment and automatic updates. A cross-site scripting vulnerability exists in LibreNMS versions prior to 23.8.0. The...

PT-2023-28834 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: librenms/librenms versions prior to 23.8.0 Description: The issue is related to Cross-site Scripting XSS - Reflected in the GitHub repository librenms/librenms. This type of attack occurs when an application includes user input in its respons...

Reflected XSS

Description Reflected Cross-Site Scripting XSS vulnerability in LibreNMS 22.12.0 - Fri Dec 30 2022 10:11:51 GMT+0100 allows attackers to execute arbitrary external javascript code in the browser affected from /ports/group parameter. 1. Login 2. Navigate PoC link Proof of Concept...

SNMP location XSS vulnerability

Description By including some HTML in the "Location" field of the snmpd configuration of a managed device, an attacker can inject HTML into the LibreNMS "Devices" tab, which then gets rendered when the page is viewed. EDIT: I'm having difficulties developing a proper exploit for this beyond the...