CVE-2022-3561 Cross-site Scripting (XSS) - Generic in librenms/librenms

Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 22.10.0...

PT-2022-22608 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: librenms versions prior to 22.10.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository librenms/librenms. Recommendations: For versions prior to 22.10.0, update to version 22.10.0 or lat...

CVE-2022-4067

LibreNMS (librenms/librenms) is affected by a stored Cross-site Scripting (XSS) vulnerability in versions prior to 22.10.0. Root cause cited in sources is stored XSS; impact is consistent with XSS in the web UI. Remediation: upgrade to version 22.10.0 or later to resolve the issue. Public referen...

CVE-2022-3561

CVE-2022-3561 is a Cross-site Scripting (XSS) vulnerability affecting LibreNMS (librenms/librenms) prior to version 22.10.0. The issue is described as a generic XSS vulnerability in the Librenms codebase (no vendor-specific details beyond the Librenms repository). Affected versions are prior to 2...

CVE-2022-3562

CVE-2022-3562 is a stored XSS in LibreNMS (librenms/librenms) prior to 22.10.0. Veracode notes the issue due to lack of sanitization in bill_name in print_port_list (bill.inc.php), allowing malicious JavaScript. Multiple sources confirm XSS exists before 22.10.0; remediation is to upgrade to 22.1...

CVE-2022-4069

CVE-2022-4069 affects librenms/librenms prior to 22.10.0. The vulnerability is a Cross-site Scripting (XSS) flaw arising from insufficient input validation in web UI components, notably in destroy-related code paths (e.g., DeviceGroupController.php and PortGroupController.php) that process pop-up...

CVE-2022-4070

LibreNMS (librenms/librenms) is affected by CVE-2022-4070: Insufficient session expiration prior to version 22.10.0. The vulnerability stems from inadequate session expiration handling in LibreNMS before 22.10.0 and is documented across multiple sources (including Red Hat, GHSA, CNVD, NVD, OSV). ...

CVE-2022-3525

CVE-2022-3525 describes a vulnerability in the LibreNMS project (librenms/librenms) before version 22.10.0, caused by deserialization of untrusted data. The Red Hat, CNVD, CNNVD, GHSA, OSV, NVD, and CVE listings confirm this issue across multiple ecosystems, with the core impact described as seve...

LibreNMS 跨站脚本漏洞

LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of network environments and automatic updates. A security vulnerability exists in LibreNMS versions prior to 22.10.0 that stems from the...

CVE-2022-4069 Cross-site Scripting (XSS) - Generic in librenms/librenms

Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 22.10.0...

CVE-2022-3525 Deserialization of Untrusted Data in librenms/librenms

Deserialization of Untrusted Data in GitHub repository librenms/librenms prior to 22.10.0...

CVE-2022-4070 Insufficient Session Expiration in librenms/librenms

Insufficient Session Expiration in GitHub repository librenms/librenms prior to 22.10.0...

CVE-2022-4069 Cross-site Scripting (XSS) - Generic in librenms/librenms

Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 22.10.0...

CVE-2022-3525 Deserialization of Untrusted Data in librenms/librenms

Deserialization of Untrusted Data in GitHub repository librenms/librenms prior to 22.10.0...

PT-2022-25480 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: librenms versions prior to 22.10.0 Description: The issue is related to insufficient session expiration. Recommendations: For versions prior to 22.10.0, update to version 22.10.0 or later to resolve the issue...

LibreNMS 跨站脚本漏洞

LibreNMS is a PHP and MySQL based open source network monitoring system from the LibreNMS community. The system features custom alerts, auto-discovery of network environments and automatic updates.LibreNMS versions prior to 22.10.0 have a security vulnerability that stems from the presence of...

CVE-2022-3561 Cross-site Scripting (XSS) - Generic in librenms/librenms

Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 22.10.0...

CVE-2022-4068 Improperly Controlled Modification of Dynamically-Determined Object Attributes in librenms/librenms

A user is able to enable their own account if it was disabled by an admin while the user still holds a valid session. Moreover, the username is not properly sanitized in the admin user overview. This enables an XSS attack that enables an attacker with a low privilege user to execute arbitrary...

CVE-2022-4067 Cross-site Scripting (XSS) - Stored in librenms/librenms

Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.10.0...

LibreNMS 代码问题漏洞

LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of the network environment and automatic updates. A security vulnerability exists in LibreNMS versions prior to 22.10.0 that stems from...